PIX506E VPN Config Guide - Basic Config ?

[xdeq]

I found this site very useful.
So keep posting new questions.
I study Cisco PIX Firewall and VPN Configuration Guide, Version 6.3

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/

and can not find the section where they clearly describe what needs to be done to:
1. Enable(configure) VPN with IPsec basic on PIX506E
2. Create/Define individual users and passwords
3. Connect using Cisco VPN Client.
4. Get the WINS and DNS assigned to the client.

no radius, no ca server, just basic configuration of VPN and IPsec.

Regards
Robert

 

[Robroy2003]

If all you are doing is client to pix, no other vpn no other passthrough stuff this should do it for you



access-list 101 permit ip 172.16.0.0 255.255.0.0 192.168.254.0 255.255.255.0
(where 172.16.0.0 is your internal subnet)

ip local pool ippool 192.168.254.1-192.168.254.254

nat (inside) 0 access-list 101

sysopt connection permit-ipsec

crypto ipsec transform-set myset esp-des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set myset
crypto map mymap 10 ipsec-isakmp dynamic dynmap

crypto map mymap interface outside

isakmp enable outside
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption des
isakmp policy 20 hash md5
isakmp policy 20 group 1
isakmp policy 20 lifetime 86400

vpngroup vpn3000 address-pool ippool
vpngroup vpn3000 dns-server 172.16.0.1
vpngroup vpn3000 wins-server 172.16.0.1
vpngroup vpn3000 default-domain yourdomain.com
vpngroup vpn3000 idle-time 1800
vpngroup vpn3000 password yourpassword
vpngroup vpn3000 split-tunnel 101

Your "group name" will be vpn3000 so you can change this to the username you want.

Questions?
Let me know

Mark Spencer

 

[308win]

more clues here

http://www.cisco.com/en/US/customer...s_configuration_example09186a0080093f89.shtml

and the mother load of examples

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html

search cisco site for "pix 500 example configuration" if the above URL's give you grief.

 

[br0ck]

look in to pixcript

http://teachers.sivan.co.il/yizhar/files/pixcreen....