background image
Scenario Answers 587
Figure 15-20
Scenario 2 Suggested Solution
Figure 15-21
Scenario 3 Suggested Solution
By implementing the solution shown in Figure 15-21, the CCDP can meet the customer's
requirements. Stateful firewall is put into place by using the PIX firewall.
Also, by implementing a VPN tunnel between the PIX firewalls, you can meet the LAN-to-
LAN requirement.
Cloud
CBAC TCP interceptor
feature
Perimeter router
Choke router
Internet
IBM compatible
IBM compatible
IBM compatible
IBM compatible
DMZ area
Site A
Site B
VPN
87200333.book Page 587 Wednesday, August 22, 2001 1:41 PM