Advertisement

03.27.2008 at 09:52AM PDT, ID: 23274757
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
8.8

How do I build a VPN tunnel between a PIX and an ASA, with both already running as firewall/routers and providing VPN to client PCs?

Asked by envoygc in Cisco PIX Firewall, Virtual Private Networking (VPN), IPSec Security Protocol

Tags: , , ,

I am trying to build a VPN tunnel between a PIX 515 at site A and an ASA 505 at site B; Both the PIX and the ASA are serving as the firewall and router for their sites, and both are already terminators for vpn clients running on off-site PCs.

My goal is to install a server behind the PIX at site A, on a 192.168.2.0 network hanging off eth2 - and to have that server/network connected through the VPN tunnel to the 192.168.1.0 network behind the ASA at site B. I need for them to be able to see each other as two sites in an AD domain.

If I'm not explaining this clearly, please let me know.

I'm facing two challenges:

 1) All the example material I can find on building VPN tunnels is on edge devices that are not also running firewall, internet routing, and VPN client services - and so I'm having some trouble applying the examples effectively.

2) I do not have any test equipment, and both devices need to provide VPN all the time. So far, every time I have attempted to create the tunnel it has failed and the existing VPN setup for clients broke as well. I can schedule short outage windows, but I do not really ever have enough time to just slog through it.

Of course my biggest challenge is that I haven't done this before. :-)

 I have attached sanitized config files from the PIX at site A and the ASA at site B.

Is a VPN tunnel the best way to accomplish my goal with this equipment? Will it work in this situation? If so, what do I need to add to these configs?

If needed I can post more material about the attempts I made to get the tunnel working, the config changes I made, etc...

Thanks!Start Free Trial
Attachments:
 
ASAConfigSiteB.txt (5 KB) (File Type Details) 
Config for the ASA at Site B
 
 
PIXConfigSiteA.txt (8 KB) (File Type Details) 
Config for the PIX at Site A
 
[+][-]03.27.2008 at 10:04AM PDT, ID: 21223617

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.27.2008 at 10:39AM PDT, ID: 21223956

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.27.2008 at 10:44AM PDT, ID: 21224007

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.27.2008 at 11:07AM PDT, ID: 21224233

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.27.2008 at 11:18AM PDT, ID: 21224328

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.27.2008 at 11:27AM PDT, ID: 21224388

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.27.2008 at 01:10PM PDT, ID: 21225303

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.28.2008 at 06:43AM PDT, ID: 21230292

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.31.2008 at 07:11AM PDT, ID: 21245499

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.31.2008 at 07:13AM PDT, ID: 21245510

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.31.2008 at 11:16AM PDT, ID: 21247742

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.31.2008 at 12:52PM PDT, ID: 21248535

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.31.2008 at 01:53PM PDT, ID: 21249099

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.31.2008 at 01:58PM PDT, ID: 21249149

View this solution now by starting your 30-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Cisco PIX Firewall, Virtual Private Networking (VPN), IPSec Security Protocol
Tags: Cisco, IOS, 7.0(2), 1 PIX and 1 ASA
Sign Up Now!
Solution Provided By: Voltz-dk
Participating Experts: 2
Solution Grade: A
 
 
[+][-]04.01.2008 at 10:04AM PDT, ID: 21255941

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]04.01.2008 at 10:05AM PDT, ID: 21255948

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20081112-EE-VQP-44 / EE_QW_2_20070628