PIX IPSEC on XP seyup??? (works on 2K!)

[Silentone]

Hey all,

Any help here would be appreciated...I have a PIX 506 set up and configed properly with IPSEC (RADIUS, 3DES, Shared Key).

My Win 2K/95/98 clients all use SafeNet/Soft-Pk with no probs. I have been trying to get it working with XP for some time with no success.

Any XP to PIX tutorials I can use that you know of? This is more of an XP IPSEC question but I would appreciate help from anyone who has got XP working with PIX, IOS or similar...just need a bit of a setup tutorial. Either that or details from someone who's done it.

My Environment:

Remote Host (Where Pix is) - 1.1.1.1
Pix 506 3DES with Radius auth to NT domain server Shared key auth, 3DES, SHA, Diffie (level 1) Auth is for subnet

Remote client (XP client) - 2.2.2.2
On Bell DSL
Using Linksys wireless router with IPSEC passthrough (Win 2K clients in same segment work)
Same properties used for security as Win 2K boxes.

...let me know if you need more info here

I'm feeling a little dense with how MS has put together their IPSEC implementation...

thx

RG

 

[Silentone]

make that "Setup"

 

[yizhar]

HI.

This articel may help you. It is about W2K server to pix, but I think that XP IPSec configuration is similar:

http://www.cisco.com/warp/public/707/2000.html

What is your pix OS version?

You should consider adding support for the newer "Unity" Cisco VPN client version 3.xx by reconfiguring the pix and upgrading pix OS if needed, and installing the newer client on the workstation.

http://www.cisco.com/warp/public/110/cvpn3k_pix_ias.html

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[Silentone]

thx for the link...I will give it a shot and let you know.

Would love to upgrade the pix...currently @ 5.3 but support subscription just expired and cisco wants to charge me $1000 just for the upgrade to v.6.1/2...

+ now that we are not subscribed, we can't download the updated client

Thanks

RG