VPN 3005 Placement 1

[5ascent0]

I have a PIX 501 connecting our private LAN to an XO T-1. I want to implement the VPN 3005 I just bought, but am unsure as to the best topology. Do I put it in front of behind of or parallel to our PIX? If it goes in front of it, do I have to recreate all of my VPN tunnels between the main PIX and our remote site PIX's?

Any insight is greatly appreciated.

 

[mtashiro]

Connect the public interface to the outside and the private interface to the inside. Obviously the public side will need a real IP.

 

[5ascent0]

I understand that public is external and private is internal, however does the private inteface on the VPN 3005 go to the external interface on my PIX or does the internal interface on the PIX go to the external interface on the VPN 3005, or do the devices sit parallet on my perimeter each with their own public IP.

LAN > PIX > VPN 3005 > Internet
or
LAN > VPN 3005 > PIX > Internet
or
LAN > PIX > Internet
and
LAN > VPN 3005 > Internet

Thank you for your insight so far.

 

[mtashiro]

Outside Inside
______PIX______
| |
| |
Public -----> switch/hub switch/hub ---> Private
| |
|_____3005______|