Advertisement

02.15.2007 at 11:33AM PST, ID: 22392290
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
6.6

Need help with configuration of PIX 515E to remote Cisco 871W site to site VPN with dynamic addressing

Asked by verance in Cisco PIX Firewall

Tags: ,

Here is my basic setup:

PIX 515 with IOS 7.1(2) connected via site to site vpn with a Cisco 871W (IOS 12.4).

I originally set this up with a static address for the point to point between these two systems and that worked great.

Now the user on the remote side changed his ISP and is getting dynamic addressing.    So of course every time his ISP makes a change a couple of changes need to be made on the central PIX.

I referenced the following Cisco article that discusses such a setup between two pix devices:
http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a0080094680.shtml

I need a check on the config of the two devices.

Here is how it's setup on the PIX now:

crypto map VERANCE-VPN-MAP 200 set peer <external IP masked> <---current external IP of remote device
crypto map VERANCE-VPN-MAP 200 set transform-set DEFAULT-TRANSFORM-SET

tunnel-group <external IP masked> type ipsec-l2l    <---current external IP of remote device
tunnel-group <external IP masked> ipsec-attributes  <---current external IP of remote device
 pre-shared-key *

and on the 871W:

crypto isakmp policy 10
 authentication pre-share
crypto isakmp key ********* address <external IP masked>  <---current external IP central PIX

____________________________________________________________________

The article mentions that the main setting change that should take place on the central PIX are (as interpreted by me):


crypto map VERANCE-VPN-MAP 200 set peer 0.0.0.0
crypto map VERANCE-VPN-MAP 200 set transform-set DEFAULT-TRANSFORM-SET

isakmp key ******** address 0.0.0.0 netmask 0.0.0.0

(this would replace the lines above)

Nothing would be changed on the remote 871W (unless of course the external IP address of the central PIX were to change).

Is this the only change that would need to be made - or is there more coding involved?

Start Free Trial
 
Keywords: Need help with configuration of PIX 5…
Title
1 Pix to Pix VPN
2 adding 2nd VPN to PIX
3 Remote access to a Pix from a Pix prot…
4 PIX
5 pix VPN
6 Dyamic to static site to site VPN with PI…
 
Loading Advertisement...
 
[+][-]02.15.2007 at 04:36PM PST, ID: 18545280

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.15.2007 at 09:49PM PST, ID: 18546414

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.22.2007 at 11:05AM PST, ID: 18590413

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.23.2007 at 12:55PM PST, ID: 18599178

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.23.2007 at 01:02PM PST, ID: 18599229

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.23.2007 at 01:40PM PST, ID: 18599476

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zone: Cisco PIX Firewall
Tags: pix, cisco
Sign Up Now!
Solution Provided By: batry_boy
Participating Experts: 1
Solution Grade: A
 
 
[+][-]02.23.2007 at 01:56PM PST, ID: 18599586

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.23.2007 at 02:02PM PST, ID: 18599630

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 09:43AM PST, ID: 18610837

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 11:29AM PST, ID: 18611677

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 12:39PM PST, ID: 18612229

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 12:57PM PST, ID: 18612395

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 01:08PM PST, ID: 18612488

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 01:15PM PST, ID: 18612535

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 01:28PM PST, ID: 18612647

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 01:48PM PST, ID: 18612838

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 01:55PM PST, ID: 18612888

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.26.2007 at 02:35PM PST, ID: 18613227

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.01.2007 at 09:00AM PST, ID: 18633807

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32