Mehrere VPNS auf einer PIX

[onedread 10]

ja und mit diesem Statement ist dann wohl alles klar.

 

connection permit-ipsec

 

Implicitly permit any packet that came from an IPSec tunnel and bypass the checking of an associated access-list, conduit, or access-group command statement for IPSec connections.

 

Use the sysopt connection permit-ipsec command in IPSec configurations to permit IPSec traffic to pass through the PIX Firewall without a check of conduit or access-list command statements.

 

An access-list or conduit command statement must be available for inbound sessions.

 

By default, any inbound session must be explicitly permitted by a conduit or access-list command statement. With IPSec protected traffic, the secondary access list check could be redundant. To enable IPSec authenticated/cipher inbound sessions to always be permitted, use the sysopt connection permit-ipsec command.

 

Ok. thx guys.

 

onedread