Advertisement

03.05.2007 at 09:49AM PST, ID: 22428772 | Points: 500
[x]
Attachment Details

VPN tunnel between PIX 515E and Linksys RV082 and RV042

Asked by nkeever in Networking Hardware Firewalls, Network Management

Tags: , , , ,

First Time configuring VPN Long time using VPNs

I need to set up multiple (9) VPN tunnels between my PIX515E and several Linksys routers. Model RV082 and RV042.  I currently have a tunnel between my 515e and a 505 pix. What I have tried to do is copy settings  for my PIX to PIX tunnel to get my tunnel between the pix and linksys to work but just can’t seem to get it right. For one thing when I add the following line I lose my tunnel to my 505. crypto map Gaylord interface outside.

Here are the commands I am adding to my 515. Not sure if I need all of this or not or if I need more.

access-list TO_Gaylord permit ip 10.56.35.0 255.255.255.0 10.56.1.0 255.255.255.0
access-list NO_NAT permit ip 10.56.35.0 255.255.255.0 10.56.1.0 255.255.255.0
pdm location 10.56.1.0 255.255.255.0 outside

crypto map Gaylord 30 ipsec-isakmp
crypto map Gaylord 30 match address TO_Gaylord
crypto map Gaylord 30 set peer 82.227.13.15
crypto map Gaylord 30 set transform-set strong-des
crypto map Gaylord 300 ipsec-isakmp dynamic dynmap
crypto map Gaylord client authentication LOCAL
crypto map Gaylord interface outside

isakmp key ********* address 82.227.13.15 netmask 255.255.255.255 no-xauth


The following is the config I have in my linksys.

Local Security Gateway Type  IP Only IP
  IP address  .  .  .  82.227.13.
  Local Security Group Type Subnet  IP address  .  .  .  
  Subnet Mask  .  .  . 255.255.255.0  
--------------------------------------------------------------------------------
Remote Security Gateway Type  IP Only  
  IP address  .  .  .   12.15.18.56
  Subnet Mask  .  .  .   255.255.255.0
--------------------------------------------------------------------------------
Keying Mode Manual IKE with Preshared key  
  Phase1 DH Group Group1
  Phase1 Encryption 3DES
  Phase1 Authentication MD5
  Phase1 SA Life Time  seconds  

  Perfect Forward Secrecy   “unchecked”

Not sure what to have for Phase 2 if I even need anything.

  Phase2 DH Group Group1 Group2 Group5  
  Phase2 Encryption  DES
  Phase2 Authentication  MD5
  Phase2 SA Life Time  3600seconds  
  Preshared Key   **********


Help.

thanks
Start Free Trial
 
Loading Advertisement...
 
[+][-]03.05.2007 at 01:07PM PST, ID: 18657378

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.05.2007 at 04:21PM PST, ID: 18658589

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.07.2007 at 06:58PM PST, ID: 18676092

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.08.2007 at 10:13AM PST, ID: 18681159

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.08.2007 at 10:56AM PST, ID: 18681576

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.08.2007 at 10:57AM PST, ID: 18681590

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.08.2007 at 01:11PM PST, ID: 18682845

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.10.2007 at 11:44AM PST, ID: 18694901

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.15.2007 at 10:13AM PDT, ID: 18728686

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.17.2007 at 12:30AM PDT, ID: 18739555

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]04.02.2007 at 05:51AM PDT, ID: 18835858

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32