[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Cisco VPN concentrator

Posted on 2006-07-19
3
Medium Priority
?
381 Views
Last Modified: 2012-05-05
hi I'm looking at purchasing a Cisco VPN concentrator to terminate all of my site to site VPN's and Cisco client VPN's

i have 2 remote sites which have a cisco 501 which VPN's back to the 515e

I'm just using a static username/password for the Cisco client!!! that's why i want to move to the VPN Concentrator

my pix is connected directly to the cisco Router (Outside) and then to the internal LAN, I have 1 DMZ connection which is already being used (mailsweeper)

what's the best network design for installing this concentrator, where should it be placed within the network?

regards
xk8
0
Comment
Question by:jagdhillon
1 Comment
 
LVL 10

Accepted Solution

by:
naveedb earned 500 total points
ID: 17137572
I'm just using a static username/password for the Cisco client!!! that's why i want to move to the VPN Concentrator

If this is the only concern you have to, you may consider deploying a RADIUS server in your environment.

If there are other reasons, reliability, volume etc., you may go ahead with Concentrator. You can connect in the same place ase your PIX is, i.e. between your Outside router and Internal Network.


You can also connect the LAN side of Concentrator to your DMZ, but would require setting up rules to allow traffic from DMZ to Inside Network through PIX. It will be more secure if you require such setup.
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question