adtran ta 608, cisco pix 501, win2k3 server, virtual private networking

Posted on 2005-04-25
Last Modified: 2008-01-09
OK, here is another question to all you experts, I know you can help me learn something new.

We just got a T1 line install (the data portion anyways). They installed an AdTran TA 608 router. We have a Cisco PIX 501 firewall, and a Windows 2003 Server.

Installation went fine and the internet is very fast. Now for the fun stuff.

In order for the AdTran to port forward, I have to call the ISP to set that up. I asked if it wsa possible for me to do it and they will send me a username/password to login to the AdTran.

We are going to be opening another store in the near future with DSL or cable internet and 2 Windows XP Pro machines.

In our current store with the T1 we have it setup like, AdTran to outside interface of PIX, 1 inside interface to lan with server attached to lan. We are going to need a vpn so we can share a database to the other store requiring file sharing. Also employees on the road will need to take pda cellphones to get access to the database as well.
I have read that the AdTran should be connected to the Windows Server, and a 2nd nic to the lan.

Should I setup this way or am I ok? And how would I go about setting up the VPN for this situation?

I am a noobie to T1 and vpn but am learning. TIA.
Question by:subsis10ce
    LVL 3

    Assisted Solution

    Have the ISP port forward the PPTP or L2TP ports to your WAN port of the Cisco,  Then configure the Cisco to port forward those same ports to the WAN NIC on the 03 server.  Then use wizard in 03 server to create the VPN login security. Check this out. Why to pick a protocol -

    and these from Remond,
    both were quite helpful with my first one.
    Good luck Server 03 makes it pretty easy
    LVL 4

    Accepted Solution

    You can make your PIX be a VPN concentrator so people will connect to PIX and have VPN connection. Thus PIX has to be set up as VPN termination point and AdTran has to be transparent(I guess it is already transparent if your PIX has public IP on outside interface, if not ask ISP to reconfigure AdTran and PIX so PIX has public IP on outside interface). No need to connect AdTran to your LAN as it will be a serious security issue especially having PIX but bypassing it is a waste of investment in PIX.


    Author Comment

    OK, I setup the Windows 2003 Server to accept incoming VPN connections, and it works fine internaly. I *think* I setup the Cisco PIX 501 to poit VPN connections to the server, so hopefully that is ok.

    I did however, contact FDN and they made me an account on the AdTran. I do not see any options for port forwarding in the AdTran.

    They did setup port forward port 3389 for RDP for me but I cannot find that in the AdTran to look as an example.

    But this is for another question. Thanks guys you helped me out. And those links were great as well.

    Definetly I figured that the PIX should be between our lan and AdTran...

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    #Citrix #Citrix Netscaler #HTTP Compression #Load Balance
    Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now