3 sites 3 PIX's

[br0ck]

My setting
3 sites 1:main office 2:warehouse 3:store
the main office has a T1 with a PIX 506
the 2 other sites have DSL with a pix 501
Main office has the servers (Mail, F&P and Acct)
All sites need access to the mail server and the Files
i have a Site to Site vpn from the main office to the warehouse but i now need to include the store to access mail and others

with a PIX what is the best method?? can i do a site to site to site or do i have to do a Spoke and hub conifg? what about the "easy vpn" ??
Regards
Brock D. Mowry,MCP
Hardware Specialist
iNECTA LLC
Miami, Fl

 

[Iota]

Check out The PIX Hub and Spoke model at cisco's website.

http://www.cisco.com/warp/public/110/pixhubspoke.html

 

[yizhar]

HI.

You can use similar configuration as the one you have for the warehouse. I guess this is the best option for you.

The new "easy VPN" option can work fine if:
The pix at the store is latest version 6.2x (pix506 can be older 6.x version).
You need the store to access main office but do not need the main office to initiate connections to the store.
The pix506 is configured to accept dynamic incoming IPSEC VPN connections .

Once again, if the store pix has fix ip, I would recommend using the same site to site method as used for the warehouse.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[br0ck]

yizhar,
i'm kinda lost as how to go about it
do i add an addinitial peer ?
or a hole new isakmp set?
sorry for the lack of knowlege
the store has a static internal and an avable public ip
Brock D. Mowry,MCP
Hardware Specialist
iNECTA LLC
Miami, Fl

 

[yizhar]

HI.

Yes, you simply add another peer at the main office, and the configuration for the store will be similar to warehouse.

You do have fix registered ip for all pix boxes, right?

You can use pixcript to generate sample config:

http://teachers.sivan.co.il/yizhar/#pixcript

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[br0ck]

yizhar,
you are the man! and your tools are 2nd to none
thanks for all your help Brock D. Mowry,MCP
Hardware Specialist
iNECTA LLC
Miami, Fl