asked on

Cisco VPN concentrator

I'm currently running a PIX 501 at our office and I have 4 point to point VPN's setup there. The problem is now 2 of the points not only want to talk to my office, now they want to talk to each other.

I've always been told that the PIX 501 will not allow VPN traffic from one office to come in and leave for another office. Is that true? Is there a way around it? Maybe with a router on the inside?

What is the least expensive Cisco device that will allow VPN traffic to do what I want?

Thanks!
brasslan

SOLUTION

Istvan Kalmar

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

brasslan

ASKER

I also forgot to mention that I only have control of the hardware at my office. No control over office B and office C, I don't even know what hardware they are running. Here is what needs to happen. Office B and office C want to talk to each other, but they refuse to build a VPN tunnel between themselves (because of political bull). There currently exists a VPN tunnel between our office and office B and another tunnel between us and office C. So they want me to route the traffic between the two VPN tunnels.

Can this be done with any Cisco router? Do I need to look for one with VPN capabilities?
I've never heard of DMVPN, but from the 2 pages that I just read, it sounds like all endpoints would have to be setup for the DMVPN and I don't know if the other 2 locations are capable (or willing) to do this.

Right now, the PIX is the head end for our network. Should I put the Cisco router outside the firewall and move the VPN responsibilities to the new device? Or should the router sit inside the firewall?

ASKER CERTIFIED SOLUTION

Les Moore

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

brasslan

ASKER

Can this be done with any Cisco router? Does every Cisco router have VPN capabilities?

And yes, the stupid guys at Office B and C will adjust their current access lists to allow the new traffic, but won't build a tunnel between themselves :-(

brasslan

ASKER

The question wasn't really answered. But I do apreciate the responces, they were very helpful.

Istvan Kalmar

Yes it is possible, the cisco routers have VPN capabilies