Overlapping LAN need VPN

[nloecke]

Hi there. My client has a 10.0.0.0 /8 (255.0.0.0) network. They need to connect a VPN to another network with a 10.130.0.0 /24 (255.255.255.0).
My side is running a PIX 515 and the other side is running a PIX as well, but I don't know the model, other than it's slightly newer.

I know we have to do something with "double-NAT", but I have no idea how to implement this, especially since I can only manage our side.

This Cisco page seemed to be helpful, but after further review, I get totally lost.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800949f1.shtml

I can post portions of my config if anyone thinks it would be helpful.

Thanks

<<Witty Signature>>

 

[brianinms]

Is your clients network actually that large and you are using a summary address or a misconfiguration when the network was built? What version code is your 515 running?

 

[nloecke]

Hey Brian!
Thanks for your help with my last problem by the way.

I know they use addresses all over the available range, but I'm pretty sure they don't actually need 16.7 million hosts.
Unfortunately we didn't build their network, so my guess is that someone decided to use 10.x address space and kept the default subnet mask.

The PIX on our end is 6.3(5).

<<Witty Signature>>

 

[brianinms]

I haven't done this on a pix with that code, but I would assume its the same. You only need to nat one side of the vpn tunnel.

http://www.cisco.com/en/US/products...s_configuration_example09186a00808c9950.shtml