PIX 515e + IPSec

[darylhunter]

Hi there...

I have a PIX515e that I use primarily for VPN connections from home using Cisco VPN client 4.0.3. I also pinhole through

http://www and

smtp. This is on ISP #1.

On the other side of the network, I have a 1710 that I use for IPSec tunnels to two remote offices. This is via ISP #2.

I want to build in redudndant IPSec tunnels from the remote offices through the PIX.

My problem is that before I started working on the IPSec tunnels, I had a crypto map setup for the incoming VPN.

When I built my new tunnels, I set the crypto map for that new map to the outside interface.

When I do that, I lost my incoming VPN connections.

How do I set multiple crypto maps to "bind" to the outside interface?

I'm VERY new to the PIX. I've only been working on it for about 2 weeks and am struggling.

Help?

I've been all over the CCO site and have the .PDF guides and such, but I can't find one that meets my needs.

--DW

 

[themut]

You are probably using different crypto maps... You need to use different instances of the same crypto map.

The link below is an excellent guideline:

http://www.cisco.com/en/US/products...s_configuration_example09186a00800948b8.shtml

Look at the PIX1 configuration...

 

[hunterdw]

Thanks themut--

I can now get multiple tunnels up and also remotely VPN using the client.

I didn't understand the multiple instances of the same crypto map thing. Got it now.

--DW