«

[Scott Jackson]

Is it possible to have NAT and a site to site VPN tunnel running using the translated addresses on the one PIX?

I have been giving an IP address pool from a client to use to connect to their network. I need to NAT our private LAN addresses to this range and then use the new addresses in the VPN configuration to connect to their network.

I tried setting up the NAT config which worked fine. I then added a site to site VPN config and in the access list specified the translated addresses. When I test this the NAT translation works but the VPN fails which I was sort of expecting.

Am I going to need a router or other device to do the NAT translation first and then have the firewall for the VPN or is there to make it work on just a single firewall?

Thanks
Scott