VPN Client (Not Working after Replaced Router)

[userice]

We just replaced our company router to PIX 501. Before I replaced our router, I was able to connect to sereral PIXes through VPN. Now, I can not connect anymore. Is there any port I need to open on the PIX? I understand I can also do site to site VPN, but I would like to use VPN Client. Can anyone give me a hint?

Also, we only have one ip, is there anyway I can map ports to certain PC with PIX 501. I know I can do that with D-Link or Linksys Router.

 

[baddos]

The static command will allow you to forward different ports to different hosts.

The VPN problem is probably because you have some ports blocked. Need more info on what your trying to do before suggesting a fix.

 

[userice]

Do you mean static command like this??
Outside IP: a.b.c.d
Inside IP: w.x.y.z
static (inside,outside) tcp a.b.c.d 5631 w.x.y.z 5631 netmask 255.255.255.255 0 0
static (inside,outside) udp a.b.c.d 5632 w.x.y.z 5632 netmask 255.255.255.255 0 0

Do I need any "access-list Command"?

My VPN Problem is: ¢×have 3 PIX Firewalls in 3 Different Locations. Two of them were setup as Site to Site VPN. One is in my Boss' House. I just Replaced My Boss' D-Link Router to PIX. Before I did that, He was able to Connect to two other PIXes with VPN Client. Now, He can not. He doesn't want me to set up site to site VPN on his Router. So, What ports should I open in order to get VPN Client to
work. If you can include the command line, that will be great.. Thank you

 

[baddos]

You'll need an access-list in addition to the static to actually open the ports. The static just tells the pix where to forward it.

Your Boss's PIX by default should allow him to do anything he wants outbound (including the Cisco VPN Software). You can try having him setup the VPN software for the firewalling option, but I don't think it's necessary.

 

[yizhar]

HI.

Try to upgrade the pix in your boss pix to OS 6.3x and use the new "PAT for IPsec" (or "fixup esp&quot feature:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63rnotes/pixrn63.htm

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/df.htm

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar