- reset +

Configuring PIX vpn tunnels with NAT


Above is the diagram: PIX1 vpn domain is 192.168.1.0 /24
R2 is a simple host with 192.168.1.2

R1 is an Internet host

PIX2 vpn domain is 192.168.2.0 /24
R3 is a simple host with 192.168.2.2 

Objectives:
1/ R2 and R3 must access the Internet host, they will be natted (using dynamic nat) with the PIX outbound interface 
2/ build a vpn tunnel between PIX1 and PIX2
3/ while using this tunnel hosts behind PIX1 must be natted with 192.168.3.X IP using a static NAT

PIX1 config: PDF file

PIX2 config: PDF file