pix site to site problem with NAT

Sep 22, 2007 1 Replies

Hi, I have had to change my ISP and now instead of a public ip on my pix i have a private address but i still need to have a site to site ipsec connection between two pix's.



So my topology looks like this pix1(public ip)----internet-----1721- router(nat)----pix2(private ip)



Currently all i have on the router is a default route to the dialer interface.



Im not sure how to forward the ipsec traffic to the pix and also how my pix's should be configured to connect.



Many Thanks



Alex



PS if you need any more info just ask.



For your two tunnel endpoints to connect you need to have routeable addresses across the internet. Since your ISP has provided you with a private ip address you will not be able to connect to it.

I would switch ISPs.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required