Solved

PIX 506e VPN Tunnel based on OSPF Routes

Posted on 2004-08-23
2
352 Views
Last Modified: 2013-11-16
I have a PIX 506e in a remote office that has OSPF capabilities. The endpoint is a VPN 3000 concentrator on my corporate network that is transfering the OSPF routes to the PIX.

Is it possible to build a VPN tunnel on the PIX based on the learned OSPF routes? Or do I have to tunnel everything, including internet traffic, back to the concentrator and let the concentrator make the routing decisions? If I have to tunnel everything back, I will not bother setting up OSPF on the PIX.

What do you think?
0
Comment
Question by:mousers
2 Comments
 
LVL 36

Accepted Solution

by:
grblades earned 200 total points
ID: 11869942
Hi mousers,
Personally I would not use OSPF on the PIX unless your network is so large that defining static routes would be a problem.

Have a look at this configuration example as it deals with passing ospf routing across a VPN.
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800a43f6.shtml
0
 

Author Comment

by:mousers
ID: 11869985
I'll take a look.

Yes, my Corporate LAN is hooked into a larger Corporate Intranet (the people who own us) and there are too many routes to define statically.
I have been adding static routes up to now but it is getting unmanagable.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now