VPN cisco PIX and ACS

[silks101]

I know these three go together - but I don't know how. does anyone know of a doc. that can point me in the right direction.

I basically need to configure the PIX so that it allows vpn access which is authenticated on the ACS box ideally using PPTP but with the facility to use MPPE if we need to.

does anyone know the best place to start

Thanks

 

[pmcvicker]

Here is a good place to start. Not knowing exactly what you are looking for there are lots of different examples here.

http://cisco.com/en/US/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html

 

[themut]

You can configure the PIX to act as a headend device for VPN clients. When the VPN clients establish a VPN tunnel they can be authenticated using an ACS server, if they pass the ACS authentication then, they are allowed to establish a VPN tunnel.
The link below explains how to configure the ACS server for VPN clients connecting to a router, but it works the same way for the PIX:

http://cisco.com/en/US/tech/tk59/technologies_configuration_example09186a00800a393b.shtml

 

[silks101]

thanks for the great information - I have a solution now - my only problem is I don't appear to be able to route the vpn traffic - it is fine on the local LAN but I want the vpn traffic to be able to access other areas of the network

I can post config of the vpn setup - can you tell possibly tell me how I should set up the routing for it

Many thanks

Steve