Pix 501

May 18, 2008 1 Replies
R

My vpn ip address pool is 192.168.4.100 - 192.168.4.200.


  1. Can I define the inside network to be on 192.168.0.0 subnet?
  2. Can I do this? | | machine A interface 192.168.3.9 || --------------- || port 0 of PIX router|| and | | machine B interface 192.168.4.4 || ----------------- || port 1 of PIX router||

If everything above is yes, when connected to via vpn, will pix router know to route ip 192.168.4.4 via port 1?



Thanks in advance



Vote
Twitter Facebook LinkedIn
W

Yes.

Yes; however, machine B will likely not be reachable over any VPN that gets its address from the vpn IP address pool.

Probably not, but sometimes it works even though it really should not.

Your VPN ip address pool should be an IP range that is not in the same subnet as your inside interface, so that your inside hosts will know they have to route to the VPN hosts instead of trying to connect to them directly over the local LAN.

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required