Mark,

I just got some help from the group, and cooked up a config to support this
exact solution you are looking into.  

email me off-line, and I can send you the config.  

jason


-----Original Message-----
From: Gordon T. White [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 02, 2001 3:16 PM
To: [EMAIL PROTECTED]
Subject: Re: VPNing out of a LAN


sounds like you just need to let ISAKMP and ESP packets to/from that
particular host.

you may have some issues if you are using private address space behind the
pix.

m N wrote:

> Hi,
>
> Is it possible to configure our Pix 520 to be able to
> create a sole VPN connection on the LAN itself?  In
> other words, we want to have one person connect to
> another VPN via his work computer on the company LAN.
> Right now we know that we cannot create a VPN
> connection from our desktops to another remote network
> while we are on our company network.  But for one
> user, is it possible to configure PIX to allow him to
> go through our LAN/WAN without having him have to use
> a modem to dialup and go through an ISP?  Any help
> would be appreciated!
> Thanks.
>
> Mark
>
> __________________________________________________
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail.
> http://personal.mail.yahoo.com/
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to