I have a site to site VPN connection configured from our PIX 506 (6.3.5) to one of our vendor's VPN concentrators. This VPN was set up for an application. I have been told that the vendor needs specified ports forwarded to our server, LAN IP 192.168.1.1 over the VPN tunnel. How do I do this? Do I just enter a command similar to this:
static (inside,outside) tcp interface 11660 192.168.1.1 11660 netmask 255.255.255.255 0 0
or do I need to do something special since it is over a VPN tunnel. I'm a bit confused about this and any help would be appreciated. I have to perform this work remotely so I want to make sure I don't lock myself out of the PIX. I can only access the PDM remotely...Let me know if I need to provide more info. Thanks.