Hub & Spoke with VPN Client

[mplant]

Hi,

Customer has Cisco837 (Site A) and a PIX 501 (Site B). working perfectly in a site-to-site VPN. A remote access VPN is configured on (B), but because of the PIX routing limitations, they of course can't access site (A).

Has anyone has any success with a configuration similar to http://www.cisco.com/warp/public/707/ios_hub_spoke2.html , using a VPN client as a spoke, the router (A) as the "hub" and the PIX (B) as the other spoke?

I've conf'd a test config, and while the hub router (A) tries to pass the traffic, the PIX doesn't seem to want to know about it.

[a-vazquez]

Try this document:

http://www.cisco.com/warp/public/110/pixhubspoke.html

[#3]

Hi:

I do not think you are going to get this to work since the PIX is not going to route the VPN packets back out the interface (Outside in this case) it originally received the packets on.

Depending on what your customer wants to do, why not setup a host on the network behind the PIX that they can Terminal Services into, or ssh into and then from that host, access the resources on the network behind the Cisco837? Good luck.

[mplant]

The idea is to use the PIX as the end point, not the central hub. I'm aware of the PIX's limitations in this regard.