|
Posted by response3 on October 3, 2007, 8:19 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> hello
> I`ve following problem:
>
> remote site1----central------remote site2
>
> remote locations connected with vpn to the central location,
> now I need to set communication between site1 and site2 but it must be
> realized inside the existing vpn tunnel (using ),
> in other words -how to make central device to route packets form site1 to
> site2 and reversly?
>
> site1--- pix 506 (10.6.0.0/24)
> sie2 --pix 506 (10.100.0.0/24)
> central-- pix 515 (10.0.0.0/16)
>
> Dominik
The PIX itself can't do this, as it does not allow traffic from the
same interface it was received on to be sent back out that same
interface. The newer OS PIX 7.1 may have a fix for this, but I'm not
sure. You may have to send that traffic back to a router at the
central site and send it back to the pix. The other option is to use
an IOS router and use route-maps and a loopback to get around this.
Brian
|