CISCO PIX Config Question

[littlejohnny]

Hello,

Is it possible to define a different ip address for the ipsec/crypto peer address than the "outside" address?

I have:
outside=12.109.xxx.xxx--->pix at work
inside=172.16.XXX.XXX--->pix at work

peer address=68.xxx.xxx.xxx--->cable router at home

Thank you!

 

[themut]

For the peer address you have to use the IP address on the remote IPSec peer. If it's a PIX then you use the IP address assigned to the interface where the tunnel would end on the remote end. If it's a router or other device... same thing. If the remote IPSec peer has a private IP address and the tunnel need to go through the Internet then you need to statically NAT the remote IPSec peer. Hope it makes sense.

 

[littlejohnny]

Thank you for your prompt reply. It does make sense now!