Hi,
We have a few VPN sessions already in production. Recently we implemented BGP in our network thru two CISCO 2811 routers each connecting to different ISPs. The VPNs were implemented during the pre-BGP days and the outside IP address of our firewalls (failover pair) use range A. Now we want to transition to the new set of IP addresses, range B, which is advertised via BGP. Range A cannot be advertised because it is only a /26 and our ISPs advertises only /24 and larger.
Now we have a lot of devices on the /26 so moving the entire range will be difficult. What we are trying to achieve is for the VPNs to be established thru range B. Is there a way to tell the PIX to allow VPN connections to be terminated on a additional IP address, from Range B in this case?
Thanks,
zrb