Steps to VPN to PIX 506e and pass data to SQL Server

[tlfisher]

Hello,

I have a client that uses my client-server software on his local area network. The software uses a fat client front-end with a SQL Server 2000 back-end.

The client has a PIX 506e. The client wants to be able to run my software from remote locations, yet still save the data in the central SQL Server database.

Apparently, the client is able to establish a VPN connection from a remote site and is able to browse to the Server and install the client-server software. Unfortunately, the client is not able to see the SQL Server to set up the ODBC connection.

Can someone point me to a "How To" article or give me some steps on what needs to be done to be able to run the software from remote sites so I can send them to my client.

As you can tell, I am not a PIX person. Any help appreciated.

Thanks,

TFISHER

 

[tlfisher]

Hello,

Just a bit more information. The client wants to use cisco client software at the remote site to connect to the 506e.

Thanks,

TFISHER

 

[PollekeICT]

Hi Tfisher,

When a client is at a remote office and is the only one who uses the connection to the database, it's fine to use the client.
It is however not suitable to use the cisco client software for more users in same lan, my experience is that that causes problems.

You should look at the ports to be used by the software first, and make sure they have translation and access list entry covering that port.

And you should look at the default gateway of the database server, wich must have an entry to the pix, or a router that's connected to the PIX.

Good Luck

Paul Reinieren

 

[LloydSev]

If the user is VPN'd into your network, then there should be no need to add any kind of access-lists of any kind as long as you have the following command "sysopt connection permit-ipsec"

Computer/Network Technician
CCNA

 

[themut]

Here's the link you requested:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009442e.shtml