Solved

PIX-to-PIX IPSEC in addition to Cisco Client VPN

Posted on 2004-10-14
2
382 Views
Last Modified: 2010-04-11
Hi all,

We already have our PIX firewall configured to accept connection from Cisco Client VPN; we have a client that would like to establish a PIX-to-PIX VPN session with our office.
Is it possible to have both configurations (i.e. client vpn and lan-to-lan vpn) running on the same firewall?

Thank you
0
Comment
Question by:tshi5791
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 2

Accepted Solution

by:
Seamless-IT earned 250 total points
ID: 12329202
Yes, here is an example of the config. It's just the crypto stuff so you would need to add your ACL.

Map 20 is the site to site and 50 is the dynamic. Make sure that you put no-xauth no-config mode after the isakmp key.

crypto ipsec transform-set myset esp-des esp-md5-hmac                                                    
crypto dynamic-map dynmap 50 set transform-set myset                                                    
crypto map mymap 20 ipsec-isakmp                                
crypto map mymap 20 match address xxx                                      
crypto map mymap 20 set peer x.x.x.x                                      
crypto map mymap 20 set transform-set myset                                          
crypto map mymap 50 ipsec-isakmp dynamic dynmap                                              
crypto map mymap interface outside                                  
isakmp enable outside                    
isakmp key ******** address x.x.x.x netmask x.x.x.x no-xauth no-config mode
isakmp identity address
isakmp nat-traversal 20
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup xxx address-pool vpnips
vpngroup xxx dns-server x.x.x.x
vpngroup xxx default-domain HealthEffects.org
vpngroup xxx split-tunnel xxx
vpngroup xxx idle-time 1800
vpngroup xxx password ********

-Adam
0
 

Author Comment

by:tshi5791
ID: 12357568
Thank you for the info, I was able to add this to our current config and have it to work.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question