Is a PIX 501 to 501 VPN Possible?

[MetroMan]

Hi Everyone,

I have two Pix 501 10-client 3des boxes sitting around... is it possible to open a tunnel between the two, and If so, then how? I have two ADSL connections with win2k workgroups on either side...

Thanks Very Much!!!!

Metroman

 

[yizhar]

HI.

As long as you have registered ip addresses and each pix can ping the other, it should be the same as with other pix devices.

If you have ADSL routers that do NAT then this can make it more complicated.

So:
Do you have registered public ip address for the pix outside interface?
Can each pix ping the other?
How is the ADSL connection configurred (what devices and ip addressing)?

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[MetroMan]

I can get fixed ip addresses if necessary, so they will ping each other....the problem is that i'm new to cisco, so I have to ask how to configure it??? Thanks~!!

Metroman

 

[yizhar]

HI.

> I can get fixed ip addresses if necessary
Good. Get them.

> how to configure it???
First, you should get to learn some PIX basics like:
access-list
translations (nat/global/static)
CLI and PDM
syslog messages
and more...
The best way is to practice in a simple lab.

Then, establishing VPN will be easy, with assistant of Cisco samples, PDM, and pixcript:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/

http://www.cisco.com/go/pix

http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&s=Software_Configuration

http://www.cisco.com/pcgi-bin/Suppo...ementation_and_Configuration#Samples_and_Tips

http://www.new-ofek.co.il/yizhar#pixcript

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar