PIX as VPN HUB: conf example 1

[fabiotek]

Hi,

I' ve set up a VPN with 3 remote site routers connected to a central router acting as an hub ( in a star topology, not full mesh ), and all is working.

I've then decided to change the central router with a PIX 515: the connections remote site - hub are still working, but the connections remote site - hub - remote site don't work. The remote sites are all connected to the same interface ( outside ).

Is this a limitation of the PIX or I have to trobleshoot routing ? I haven't found an example configuration with this topology. Is it possible obtain a connection between two periferical site trought the PIX without configure any router for a full-mesh topology ?

Any help appreciate, thanks all.

Fabio

 

[routerman]

Fabio,

You are correct, the PIX will not route traffic entering the outside interface back out the same interface. You will need a fully meshed topology for the remote sites to talk to each other.


This is described in this example:

http://www.cisco.com/warp/public/110/pixhubspoke.html

Andy

 

[fabiotek]

Thanks, Andy,
I have seen the same example a few minutes ago and I have realized that the better solution to improve performance is to use a more appropriate router, like a 1721.