Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Sonicwall to PIX VPN Planning Advice

Status
Not open for further replies.

rizrizza

IS-IT--Management
Jan 18, 2006
42
US
Okay, so we have site A with a Sonicwall firewall, and site B with a Cisco PIX. I am trying to set up a site-to-site VPN in order to extend our local domain between the two sites so resources from our servers can be shared. I want all traffic on the network to continue to go through the gateways on both networks that they are now, but want to allow replication between the Domain Controllers and share certain resources from those servers over the VPN.

So... the question being can I do this with the two network being on different subnets? Or is it a case where I need to set up DHCP over the VPN from one to the other and then route all traffic but the server traffic for AD etc through the VPN tunnel.

Currently the Sonicwall VPN tunnel is setup and is sitting there inactive, I can't seem to configure the PIX end so that both firewalls can establish a connection with each other. I think there may be a problem in the Local and Destination networks I'm trying to connect.

Site A

[LAN]-----[PIX]-------[Switch]-----
10.0.0.0 198.111.1.2 198.111.1.1 |
|
{Internet}
|
|
[LAN]-----[SonicWall]---[Router]----
10.10.0.0 198.222.1.2 198.222.1.1

Site B

VPN Setup:
Peer Address
Shared Secret
Group 2
3DES
SHA1
Local Network
Destination Network

I think what is throwing me off is the fact that the PIX resides on a VLAN of the network so the inside address isn't the class a but class c subnet. Site A is being shared right now between two companies so we have half the network on one set of VLANs routing traffic out one side, and the rest through the firewall.

I am VERY new to WAN and VPN technologies so any advice is greatly appreciated.

Trying to do alot with what little I know. Thank you
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top