1. Home
  2. Cisco Systems
  3. pix site to site problem with NAT

pix site to site problem with NAT

Hi, I have had to change my ISP and now instead of a public ip on my pix i have a private address but i still need to have a site to site ipsec connection between two pix's.

So my topology looks like this pix1(public ip)----internet-----1721- router(nat)----pix2(private ip)

Currently all i have on the router is a default route to the dialer interface.

Im not sure how to forward the ipsec traffic to the pix and also how my pix's should be configured to connect.

Many Thanks

Alex

PS if you need any more info just ask.

Reply to
Alex
Loading thread data ...

For your two tunnel endpoints to connect you need to have routeable addresses across the internet. Since your ISP has provided you with a private ip address you will not be able to connect to it.

I would switch ISPs.

Reply to
heath.parrott

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.