[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 499
  • Last Modified:

Setting up Cisco VPN 3005

Hi all,

I just purchased a Cisco VPN Concentrator 3005 and am having trouble getting it to work. Here's my current config. We have an Internet T1 that goes into an Intel router. From there it goes to a Sonicwall Firewall. After that, it goes to our switch and then out to our internal network. My question is where is the best place to put the VPN Concentrator? I figured the private port would plug into the switch and I gave it an IP of 192.168.0.7 and the public needs to have an Internet IP, but where does that plug into? The switch also? Or do I need to have another switch that has the Intel router plugged into it and it  bypasses the firewall? Any help would be appreciated.

Thanks,
Matt
0
mbarys
Asked:
mbarys
1 Solution
 
peteysaCommented:
Good Evening,

Typically the VPN concentrator is plugged in externally one interface, internally second interface.  The VPN concentrator does not route/forward packets unless they are fully authenticated which is more secure than a standard firewall.  

Some Concentrators do support one armed configurations which would utilize only one interface, I am not sure if the Cisco supports that setup.  I know the sonicwall vpn concentrator has that option.

Cheers,

Dan
0
 
mbarysAuthor Commented:
That's what I figured. So I'm trying to understand how I would plug in the concentrator into the external interface. Would I hang a switch off of the router and then plug in the concentrator into that?

Thanks,
Matt
0
 
netspec01Commented:
Actually a VPN can be setup behind a firewall, in front of a firewall or parallel to a firewall.  Parallel would be the most common since it is the most simple to do.

trusted network----firewall-------switch----router----ISP
           |                                      |
            ---------concentrator--------

You will need a static pblic IP address assigned to the concentrator.

The second most popular configuratio would be to have the concentrator in front of a firewall or screening router.  This allows you the distinct advantage of adding another layer of access control/filtering.
0

Featured Post

New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now