Thanks !

interesting traffic in dynamic NAT?

; REM vpn.bat
; REM Mark Hudy
; REM 5/14/2009
; REM
; REM This batch file connects a VPN by it’s “exact name”, username and password
; REM Queries the routing table for a network value (192.168.1) and writes the results to %temp%\routes.txt
; REM Parses %temp%\routes.txt grabbing the value from the 3rd column in the top row only (pptp gateway)
; REM and adds a route for the foreign network (1.2.3.4/24) using the pptp gateway.
; REM The ‘pause’ at the end allows the user/customer to view the results before the window closes
; REM and assumes you have created a shortcut pointing to the batch file.

echo.
echo ——————————-
echo VPN Status:
rasdial
echo ——————————-

:start
echo.
echo [1] Sample VPN Connect
echo [2] Sample VPN Disconnect
echo [3] Do Neither and Cancel
echo.
set /p userinp=choose a number(1-3):
set userinp=%userinp:~0,1%
if “%userinp%”==”1″ goto 1
if “%userinp%”==”2″ goto 2
if “%userinp%”==”3″ goto close
echo invalid choice
goto start

:1
rasdial “Sample VPN Connection” SomeUsername SomePassword >NUL
route print |find “192.168.1″ >%temp%\routes.txt
@for /f “tokens=3″ %%i in (‘type %temp%\routes.txt’) do @set pptpGateway=%%i & goto :StopParsing

:StopParsing
route add 1.2.3.4 mask 255.255.255.0 %pptpGateway% >NUL
echo Sample VPN Connection is now connected.
goto :end

:2
rasdial “Sample VPN Connection” /disconnect >NUL
echo Sample VPN Connection is now disconnected.

:end
echo.
pause

:close

PIX version 7.0 improves support for spoke-to-spoke VPN communications as it provides the ability for encrypted traffic to enter and leave the same interface.

The same-security-traffic command permits traffic to enter and exit the same interface…

Not true. The PIX will not allow traffic to enter and leave the same interface regardless of network location (security “feature”). Hence why it won’t route packets on its inside interface (Router on a stick kind of implementation).

The ASA will in fact do this though.