Site to Site VPN config - my brain hurts! :)

[dkraut]

Am I the only one that finds setting up a site-to-site VPN with a PIX utterly confusing? Anyone have any good links that clearly explain each step of setting up an ISAKMP shared key site-to-site VPN for a PIX 515? I have a pretty good handle on how to accomplish this but every little bit helps.

Thanks!

Dave

 

[tschouten]

What is the site to site terminating to another pix?

 

[dkraut]

Yes... site-to-site / PIX to PIX and please don't send me to the Cisco web site. As much as I love their products, their documentation is nothing but techno babble.

 

[lgarner]

I think

http://www.cisco.com/en/US/products..._guide_chapter09186a00800eb72b.html#wp1009405

is fairly clear. Also

http://www.chinalinuxpub.com/doc/www.siliconvalleyccie.com/cisco-hn/vpn-cisco.htm,

paying attention to the Pix config and duplicating it for the other end.

Also, the PDM will pretty much walk you through the setup, and you can check the configuration to see what it did behind the scenes.