Solved

PIX-to-PIX IPSEC in addition to Cisco Client VPN

Posted on 2004-10-14
2
381 Views
Last Modified: 2010-04-11
Hi all,

We already have our PIX firewall configured to accept connection from Cisco Client VPN; we have a client that would like to establish a PIX-to-PIX VPN session with our office.
Is it possible to have both configurations (i.e. client vpn and lan-to-lan vpn) running on the same firewall?

Thank you
0
Comment
Question by:tshi5791
2 Comments
 
LVL 2

Accepted Solution

by:
Seamless-IT earned 250 total points
ID: 12329202
Yes, here is an example of the config. It's just the crypto stuff so you would need to add your ACL.

Map 20 is the site to site and 50 is the dynamic. Make sure that you put no-xauth no-config mode after the isakmp key.

crypto ipsec transform-set myset esp-des esp-md5-hmac                                                    
crypto dynamic-map dynmap 50 set transform-set myset                                                    
crypto map mymap 20 ipsec-isakmp                                
crypto map mymap 20 match address xxx                                      
crypto map mymap 20 set peer x.x.x.x                                      
crypto map mymap 20 set transform-set myset                                          
crypto map mymap 50 ipsec-isakmp dynamic dynmap                                              
crypto map mymap interface outside                                  
isakmp enable outside                    
isakmp key ******** address x.x.x.x netmask x.x.x.x no-xauth no-config mode
isakmp identity address
isakmp nat-traversal 20
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup xxx address-pool vpnips
vpngroup xxx dns-server x.x.x.x
vpngroup xxx default-domain HealthEffects.org
vpngroup xxx split-tunnel xxx
vpngroup xxx idle-time 1800
vpngroup xxx password ********

-Adam
0
 

Author Comment

by:tshi5791
ID: 12357568
Thank you for the info, I was able to add this to our current config and have it to work.
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The next five years are sure to bring developments that are just astonishing, and we will continue to try to find the balance between connectivity and security. Here are five major technological developments from the last five years and some predict…
If you are looking at this article, you have most likely been hit by some version of ransomware and are trying to find out if there is anything you can do, or what way you should react - READ ON!
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question