Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

PIX 506e VPN Tunnel based on OSPF Routes

Posted on 2004-08-23
2
Medium Priority
?
363 Views
Last Modified: 2013-11-16
I have a PIX 506e in a remote office that has OSPF capabilities. The endpoint is a VPN 3000 concentrator on my corporate network that is transfering the OSPF routes to the PIX.

Is it possible to build a VPN tunnel on the PIX based on the learned OSPF routes? Or do I have to tunnel everything, including internet traffic, back to the concentrator and let the concentrator make the routing decisions? If I have to tunnel everything back, I will not bother setting up OSPF on the PIX.

What do you think?
0
Comment
Question by:mousers
2 Comments
 
LVL 36

Accepted Solution

by:
grblades earned 600 total points
ID: 11869942
Hi mousers,
Personally I would not use OSPF on the PIX unless your network is so large that defining static routes would be a problem.

Have a look at this configuration example as it deals with passing ospf routing across a VPN.
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800a43f6.shtml
0
 

Author Comment

by:mousers
ID: 11869985
I'll take a look.

Yes, my Corporate LAN is hooked into a larger Corporate Intranet (the people who own us) and there are too many routes to define statically.
I have been adding static routes up to now but it is getting unmanagable.
0

Featured Post

Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Considering cloud tradeoffs and determining the right mix for your organization.
Tech spooks aren't just for those who are tech savvy, it also happens to those of us running a business. Check out the top tech spooks for business owners.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question