Joseph, In this scenario all you had to do is specify the TUNNEL DEFAULT Gateway on the Concentrator, Is that right. Also In site to site VPN case, the remote site can get the DHCP addresses from the servers if we define helper address on the remote site VPN router.......right ?
Thanks, neil ""Joseph Brunner"" wrote in message news:[EMAIL PROTECTED] > You need a router when running them parrallel. > The router will determine internet traffic goes to the pix, remote > vpn lan's etc go to the vpn 3000. > > Mine is like > > VPN 3000 PIX > 10.0.0.2 10.0.0.10 > > > 10.0.0.0/24 > > 10.0.0.1 > RTR > 192.168.0.1 > > SERVERS 192.168.0.0/24 > > > This way no servers need "route" commands to know where > to route what. And you guessed it, my vpn clients get addresses > on the subnet between router and vpn (10.0.0.0/24) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66852&t=66819 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]