PIX 515 VPN and global PAT

[marsmann]

Hi all,

Using version 6.3 software on PIX 515.

Our provider only gave us 2 usable addresses on a /30 network some time ago.

Can I implement a VPN to it with only one address or do I need seperate addresses (one for the firewall and one for global PAT & everything else)

not sure if connecting to it through a VPN will be funny since I only have one address to do everything...

 

[tbissett]

You only need one IP. You can use the same IP address for both your firewall outside interface and all your inside users with the following statement:
global (outside) 1 interface
That same address can also be used as the VPN endpoint.

 

[marsmann]

thanks. just wanted to be sure.