I have a cisco 2801 that is pretty much an all in one device. Its serves as my connection to the ISP, does all firewalling, NATing, etc. This 2801 then connects to a Cisco 2950 switch where all my workstation are plugged into. I want to add a Cisco PIX 506E that will be configured for a L2L VPN Tunnel to a another location. All this pix will do is the VPN Tunnel. I want all firewalling, NATing, etc be remain on the Cisco 2801. I have the inside interface of the pix connected to the 2950, but where should I connect the outside interface? I have the outside interface configured with a public address just not sure of the best way to go about connecting it. I attached a network diagram. Thanks.