Cisco PIX VPN Setup - General process flow?

Posted on 2004-10-25
Last Modified: 2010-04-17
I recently bought a PIX thanks to assistance on the following post:

I  think I may have bit off more than I was prepared to chew. I now realize I'm more of an IP novice than I previously thought. I probably would have been more successful with the Linksys route, however I have the PIX, like it's capabilities, and I've commited to tackling it.

My question is can someone just list the steps I should take in setting up VPN using Cisco VPN client? At the moment I just have general web access provisioned and I've been reviewing the Cisco configuration examples and other posts on this site. I am just looking for a process flow such as open port x, enable feature x, create list x, etc... Once I have this, I think I can reference previous posts and the cisco documentation to complete the task.

One other question I have is do I setup the VPN on the outside interface? For informational purposes, I have 2 IP addresses which I intend to use 1 with PAT for general net access and the other with Static, I think, for VPN access.
Question by:ehcruzan

    Author Comment

    I should mention that I haven't received my SmartNet package yet, so I don't have access to the client software as yet. Maybe I should append my question to include L2TP as a short term solution until I get the Cisco client.
    LVL 13

    Accepted Solution

    One of the links I use extensively is:

    which takes you to the PIX section of the Cisco website. From there it is just a short jump to the configuration examples and then you might look at something like this:

    The config has comments throughout that explain what each command (or section of commands) is for.

    I'd suggest waiting till you get the VPN client, unless you REALLY need some access prior to that. It will save confusing things.

    Author Comment

    Thank you td_miles. The link you provided is exactly what I'm looking for. I don't know why I didn't find this in my searches. Thanks!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
    Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    884 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now