HELP!!! Routers, PIX, VPN - OUCH!

[JMCColorado]

Help!!

I have never worked with a router, or a pix firewall, but I have found myself in a situation where I need to get somebody a vpn connection into my network and this is what I have to go through. There are currently no machines in the DMZ. I need to get a connection to a server that is in the LAN. How is this possible? Its a mission critical issue - Of course!


Internet
|
|
Public IP (xxx.xxx.xxx.xxx)
---------------------------
Cisco 2600 Router
(Performing NAT)
---------------------------
10.0.0.1
|
(DMZ)
|
10.0.0.2
---------------------------
Cisco PIX 515E
---------------------------
10.0.1.1 255.255.255.0
|
|
|
|
Active Directory DHCP LAN

 

[yizhar]

HI.

There are several possible solutions.

Most of them will require a registered ip address for the pix outside interface.
So first step is to contact your ISP , and get a small range of registered ip addresses.

Instead of VPN, if the remote party has a fixed ip address, you can also use PCAW, VNC or another remote control program, that will be launched manualy (for better security, instead of "always available&quot, and configure the pix to allow PCAW traffic only from the ip address of the other side.
Or better - use PCAW with the "call remote" option - that way you initiate the connection from your side.

What does the remote side need to do and access at your internal network, and how often?

What is the pix OS version? (show version)
Is DES/3DES enabled at the pix? (show version)
What is the router IOS version and features? (show version)

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar