In article , AM wrote: :The question is about PIX which has this limit. :We want the traffic between two remotes sites connected via VPNs (terminated to our PIX) to flow without any problem. :so my idea was,k and is, to use another physical interface but giving it an IP of the same subnet of IP range which the :other IP (where we terminated all the VPN) belongs to.
:Do you think there will be problems doing this?
In PIX 6, this cannot be done -- each [logical] interface must be in a different subnet. PIX 7.0, for the 515/515E, 525, and 535 might remove this limit -- it introduces major changes in the handling of interfaces. 7.0 will be available any day/week now (but wasn't available for download as of late last week.)
[Note: I would hesitate to trust "highly important" data flows to the -first- edition of any major rewrite of software!]
Perhaps due to the long hours I've been putting in lately, I have not grasped why you are considering two interfaces. Could you expand on (or re-explain) that part?