topic Re: PIX & 2000 Client in Network Security

PIX & 2000 Client

jonathan.meehan — Fri, 21 Feb 2020 05:46:38 GMT

PIX and VPN Client with ACE Authentication.

Currently works a treat but the customer wants to migrate to 2000.

The VPN client does not currently support Windows 2000. I have heard there will be one available in the new year??

Re: PIX & 2000 Client

bstremp — Thu, 21 Dec 2000 14:57:28 GMT

I'd try doing a search on the board for this topic. I've seen multiple conversations around Cisco's soon to be released universal client.

Re: PIX & 2000 Client

jwacaser — Thu, 04 Jan 2001 21:42:58 GMT

Check out win2k's built in IPSEC or if your heart can bear it, PPTP.

Re: PIX & 2000 Client

nortonsp — Wed, 10 Jan 2001 09:11:59 GMT

There should be a new unified vpn client released in the next few months.

Your best bet is pptp until l2tp support is released in pix 5.4(1)

-Steve

Re: PIX & 2000 Client

aeltrich — Fri, 26 Jan 2001 10:04:50 GMT

Where did you get the information that L2TP will be

supported in 5.4(1)? Is there a projected release

date for 5.4(1)?

On the other hand, I would prefer to have the well

working VPN3000 client running on win2k ... are there

any plans in this direction?

regards

Re: PIX & 2000 Client

csoechting — Mon, 29 Jan 2001 18:28:33 GMT

you can get a win2k client from www.ire.com I have it working using ipsec/ike on the pix. Its very similar to the win95/98/nt client.

Re: PIX & 2000 Client

mtthompson — Tue, 13 Feb 2001 04:45:53 GMT

The native Windows 2000 VPN client can be configured to work but due to bugs it requires tunnels configured in both directions. This is a problem if you are using dynamic addressing, as the tunnel end point in one direction needs to be configured every time your address changes. The filters also have a bug that prevents the use of the mirror option, and only one filter can be used per rule. This configuration does not seem to work if service pack 1 is applied!!

To configure;

Go to Local security settings.

Create filters for each direction of the tunnel avoiding using the mirror option.

Then create the IP security policy using a different rule for each direction of the tunnel. Specify your client address as the tunnel end point for one rule and the PIX as the tunnel end point for the other rule. Only apply one filter per rule.

Re: PIX & 2000 Client

grantlewis — Wed, 14 Feb 2001 04:35:18 GMT

Contact your Cisco account representative if you want to obtain the beta W2K client