Apparently this isn't a widely used setup?
I have 2 offices...
Office 1 - PIX 515e with DMZ card - VPN 3005 Concentrator connected to the DMZ card
Office 2 - PIX 515e - VPN 3005 Concentrator
I have a LAN-to-LAN setup between the 2 sites, both VPN's can ping eachother, I've added routing to the PIX's (as they're the networks default route) to route all the other offices traffic to the VPN Concentrator first.
The problem I have is that the routing doesn't work. It appears that from Office 2, the packets go from the client, to the PIX, the PIX then does PAT translation before sending them to the VPN, where the VPN has no idea what to do with the packets which now have an external IP.
In reverse, the problem could be the same, however it could also be that the Office 2 network is unable to respond correctly as it can't find the correct route.
If I write a logon script (AD domain) to statically set a route on all the machines to route directly the VPN's if needed, everything will work fine... but should I have to do this? I would like to think that there's a nice clean way of accomplishing this without making a static change on every machine.
I've probably been a bit too vague with my setup above, let me know if you need things clearing up. I've followed the Cisco guides for setting up the LAN-to-LAN, and this is all functioning correctly, everything seems to be doing it's job properly, it's just the machines can't find the correct route to take, and packets are getting lost...
Many thanks in advance for any help...