VPN with Cisco and Linux

Here is my situation and setup:

Internet --------Router A----------(E0)Router B(E1)----------LAN

Router A belongs to my ISP and they have assigned my E0 interface on Router B (Cisco 2514) a private (10.0.0.155) IP address. The E1 Interface goes to my lan. The default gateway for Router B is set to the Interface on Router A (10.0.0.1).
I have a public IP and it is on some interface over at Router A and then any thing destined with my public IP gets sent to my Router B E0 interface.

I did NAT so my users can get to the net and I setup port fowarding so my www server will work.

I need to setup a VPN solution here using a Linux box or with the Cisco IOS. I will copy and paste my sh version of the router when I get it, but for now, all I know is that when I look for any vpn commands the only thing I see is VPDN. I don't know if that will work. Also, I don't think I have the IPsec or DES feature pack. Ill copy and paste as soon as I can.

Also if I use a linux solution, does my router need to support ipsec or any encryption?



 
rankin195Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

rankin195Author Commented:
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-C-L), Version 12.0(4), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Wed 14-Apr-99 21:53 by ccai
Image text-base: 0x0302CBAC, data-base: 0x00001000

ROM: System Bootstrap, Version 5.2(8a), RELEASE SOFTWARE
BOOTFLASH: 3000 Bootstrap Software (IGS-RXBOOT), Version 10.2(8a), RELEASE SOFTWARE (fc1)

pck2514 uptime is 13 days, 23 hours, 59 minutes
System restarted by reload
System image file is "flash:/c2500-c-l.120-4.bin"

cisco 2500 (68030) processor (revision D) with 16384K/2048K bytes of memory.
Processor board ID 04151312, with hardware revision 00000000
Bridging software.
SuperLAT software copyright 1990 by Meridian Technology Corp).
X.25 software, Version 3.0.0.
TN3270 Emulation software.
2 Ethernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
32K bytes of non-volatile configuration memory.
 16384K bytes of processor board System flash (Read ONLY)

Configuration register is 0x2102
0
skyfreedomdotnetCommented:
Ok the bad news first. THe Cisco 2514 router is no longer supported by Cisco and it does not offer any VPN services.
Now the good news.  Setting up a a VPN server on LInux will work. Now this is as long as your ISP allows IPSEC traffic through their router, you should ask and demand.
Another thing you could do is by a concentrator, like a Cisco 3005 (http://www.cdw.com/shop/products/default.aspx?EDC=222396) or a Linksys (http://www.linksys.com/products/product.asp?grid=34&scid=29&prid=589).
The concentrator would be my number one choice, its easy and standalone.
Let me know if this helps and if you have any questions post them.
0
rankin195Author Commented:
Ok I think I am going to go the linux way with IPSEC sinces it is cheaper.

What would I have to do with my router since I am doing nat and pat?

Does my router need IPSEC, cause I don't believe it does.

0
skyfreedomdotnetCommented:
No, your router does not need to support IPSEC. It will only be a passthrough.
Do this:

On your router NAT your Linux box's private ip to the outside. Do you have a firewall? If so  allow only ports 500 (ISAKMP) tcp, 50 (ESP) tcp IN.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
rankin195Author Commented:
thank you
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.