802.1q over VPN

[CBuxton]

I've got 2 sites with Cisco Catalyst 2950 switches setup with 2 vlans. I've got a Cisco PIX 501 at each site that I am going to configure to do a site to site vpn. If I assign multiple vlans to the port attached to the PIX can I pass both vlans across the vpn, or is there a way to allow 802.1q tagged packets to pass over the vlan so on the other site if I setup the 2 vlans I would be able to see the computers at the other site. I want 2 separate networks with no routing between them. What are my options? Thanks for any help.

 

[spidey07]

that sounds really strange. 802.1q is a layer2 protocol, I can't see how you could pass it across a VPN unless you ran some kind of weird bridging. Also PIX doesn't support trunking or assigning more than one VLAN to an interface.

Best bet (IMHO) is to get a three interface PIX, one inside for VLAN1, one inside for VLAN2, one outside. Then build two VPN tunnels. That way you are truly separating the networks and can have complete control with the firewalls.

This sounds like a call to cisco support.