1 ip, both vpn and webserver. 1

[dougnc]

I've got 1 ip. I'm trying to vpn out to the corporate networt, and get e-mail and setup webservers at home. It seems I can only do one or the other. The vpn doesn't seem to want to work without using NAT, and with only 1 ip address, I can't get dns requests or web server access to work without routing the 1 outside ip directly to the server.

I'm going to try setting up the vpn without the nat this weekend.

Any suggestions?

Doug

 

[berford]

Doug,

Get more addresses.

In the perfect world the PIX needs one address. You can re-use that address for internal users via NAT overload. Note that NAT overload works fine for many, many applications; but there are some applications and some web sites that do not allow you to use NAT overload (Port Address Translation) because they need info that should be in the port field.

As soon as you want to put servers behind the firewall you'll need another address.

Liberty for All,

Brian