PIX - Moving Subnet behind VPN from Locally Connected...

May 01, 2006 1 Replies

I'm moving 2 Subnet that used to be behind PIX1 via Point to Point T1 to the other side of a Site-to-Site VPN with another PIX


How do I tell the PIX to route to the other side of the VPN Connection?



Thanks Scott


If you have a default route, you don't need to do anything other than ensure you get rid of any internal routing statements. Any traffic which matches the VPN crypto map match address statement will be sent over the VPN (ah, that implies you'll have to adjust the access-lists.)

Anyhow, just ensure that the routing for the destination network goes through the interface that the crypto map is attached to.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required