Media for PIX site-to-site VPN

PIX site-to-site VPN

Internet / \

11.11.11.11 22.22.22.22 ADSL Router ADSL Router 10.0.11.254 10.0.0.22.254 | | 10.0.11.1 10.0.22.1 PIX 506E PIX 501 192.168.11.254 192.168.22.254 | | New York LAN San Jose LAN

formatting link

I am trying to set up a hardware VPN based on the link above, but the multiple internet IP setup in the document has confused me. The following is what I intend to add to the "NewYork" PIX. I would appreciate it if someone could fill in the question marks!!! As well as any lines I need to add in order to allow ICMP and TCP between the 2 lans.

Thanks Nick

hostname NewYork isakmp enable outside isakmp policy 9 authentication pre-share isakmp policy 9 encryption 3des crypto isakmp key cisco1234 address 22.22.22.22 crypto ipsec transform-set strong esp-3des esp-sha-hmac access-list 90 permit ip 192.168.11.0 255.255.255.0 192.168.22.0

255.255.255.0 nat 0 access-list 90 nat (inside) 1 0 0 global (outside) 1 ?.?.?.?-?.?.?.? global (outside) 1 ?.?.?.?

crypto map toSanJose 20 ipsec-isakmp crypto map toSanJose 20 match address 90 crypto map toSanJose 20 set transform-set strong crypto map toSanJose 20 set peer ?.?.?.? crypto map toSanJose interface outside sysopt connection permit-ipsec