Site to Site VPN to DMZ

[stvleaze]

Quick question. Is it possible to get to the DMZ, as a remote lan, using a site to site vpn link? The internal lan gets to the DMZ via natting. How would the remote lan get to the dmz? Since it is only routed to the internal lan, it does not know how to get to the dmz.

Do I need to setup seperate vpn tunnels for the DMZ?

 

[Supergrrover]

It just needs to know that it is interesting traffic and not to nat it. Here is good guide.

http://www.cisco.com/en/US/products...s_configuration_example09186a00806a5cea.shtml

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[stvleaze]

Do you have to have 2 pix's to make this work?
We have linksys's at the remote lans.

 

[Supergrrover]

If the linksys will allow you to designate more than one destination lan for the tunnel/endpoint then it should work. It needs to know that it must encrypt the traffic and not to nat it. I haven't set up linksys for anything other than a basic site to site, so I don't know if it has that ability.



Brent
Systems Engineer / Consultant
CCNP, CCSP