[j-nsp] Juniper SSG Policy-based VPN and NAT

[D W]

Hello,


I have a query regarding NAT/VPN on a SSG 550M running screenOS 6.0/6.1 code. When an incoming IPSEC packet arrives from a remote site (P2P Lan-to-LAN VPN) is it possible to run that packet thru the same MIP that's assigned to the outside physical interface (untrust). I don't think this is possible to accomplish with a routed VPN, but my question is if I can achieve this with a policy-based VPN. I'm looking to use a single MIP for incoming VPN and Internet traffic so that every remote device (VPN and non-VPN) hits the server using the same IP address (the MIP).

 

Thanks,

Dave

 		 	   		  
_________________________________________________________________
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3