PIX 501 point to point VPN

[tanker135]

Folks,

I need to setup a pt-pt VPN using 501's. I have dedicated AT&T internet at home office with 1/2 class c address range. The remote is being installed with Business class ADSL (1 static IP). Can you fill me in on all details re. the configuration needed? Are there any issues I need to watch out for regarding the installation of ADSL (NAT, PAT, DHCP...)? Thanks...

 

[dx1]

Should be pretty straight forward. Make sure you use different internal subnet and your access list are correct.

Here's a good sample for site to site VPN.

http://www.cisco.com/warp/public/110/38.html

 

[tanker135]

The network at the home office is 172.18.0.0/18. I'll use 172.18.128.0/26 at the remote. Based on this, can you illustrate a config based on

http://www.cisco.com/warp/public/110/38.html?

I really want to get this right the first time and any help you can give will be appreciated. Thanks.

 

[dx1]

If we tell you, then you would never learn it

Plus, you'll be the one supporting it.

Trust me, I've taken the configs from the link and changed the necessary IPs around to what I use and it works great.

You'll do fine.

 

[gwnoyes]

Try using the VPN wizard from within the PDM, pretty slick and straight forward and you can get it right the first time. You need to be running IOS v6.3 with PDM v3.0 in order to have the VPN wizard functionality in the PDM.

 

[tanker135]

Is PDM included with a PIX 501 purchase? Thanks!

 

[rpast]

The ADSL can be tricky. Depending on how many global IPs you were given, you'll want to most likely turn off NAT and DHCP, and let the gateway device do the authentication.