Pix to Pix VPN
Posted on 2004-08-19
Ok, here goes my first question at Experts-Exchange, which looks to me like the perfect place to get an answer.
This first post is intended to explain the case and get some preliminary advice (if needed). Hopefully tomorrow i will be able to post more specific information about the case (configuration files).
I need to connect through VPN one central office with at least 4 remote offices, I also need to support mobile remote VPN clients.
For the central office i got PIX 515E, and for each one of the remote offices i got PIX 501. The mobile remote VPN clients will be Cisco VPN software client and also Microsoft PPTP client.
Every office has a DSL access to the internet. At this point, i will assume that every PIX has a public IP on its outside interface, so NAT performed by DSL routers will not be an issue for now.
I dont really think im too far away from the correct configuration, thats why i mentioned i will post the config files for the 515 and the 501 and we will start working from there. Once you all have seen them, i will be more specific to the problems i am facing.
After i started configuring the Firewalls i knew about Cisco "Easy VPN". I have not used Easy VPN, but if an expert tells me that it is the best choice, i will use it. If i didnt use in the first time is simply because i didnt know about that feature, and also because i found out it is not compatible with NAT-T, which i plan to use in case i have problems with DSL Routers. Please, feel free to comment the "Easy VPN" issue.
Well, i think thats about it, i hope you guys can understand my English, since im writing here in Spain, but most important, i hope i can understand your English, so i beg you to use as simple language as you can.