topic Pix 501 vpn in Network Security

Pix 501 vpn

scramer13 — Mon, 11 Mar 2019 12:59:54 GMT

I am tyring to use the vpn wizard through pdm to setup a vpn between two schools but I am getting crypto erros. I do not have to use the wizard but thought it would be easier. Each site has a pix 501. They both provide dhcp. The inside address of the first is 192.168.1.1 and the second is 192.168.20.1. How do I setup a vpn between the two.

Re: Pix 501 vpn

JORGE RODRIGUEZ — Mon, 16 Jun 2008 16:30:28 GMT

If I understadn correctly your post They both provide dhcp do you mean they get dhcp assigment for PIX outside interface from ISP? if this is the case at least one side of the tunnel must have static IP address on the outside interface if going over the internet, this way you can implement L2L one side with Static and one side Dynamic. Is there any chance that one side can have statiic public IP address on their firewall outside interface?

Rgds

-Jorge

Re: Pix 501 vpn

scramer13 — Mon, 16 Jun 2008 16:46:02 GMT

Sorry I wasn't clear. They both have a static IP address on the outside card that I got from our ISP. On the inside both pix act as a dhcp server.

Re: Pix 501 vpn

vvarakan — Mon, 16 Jun 2008 17:36:47 GMT

You can use the example at the following link

7.x

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805733df.shtml

6.x

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml

Re: Pix 501 vpn

scramer13 — Wed, 18 Jun 2008 12:47:34 GMT

Okay I did that step by step at each pix and now in the pdm it shows a 1 in both ike and ipsec under the vpn section. But now how do I browse to the other network from the other? I am able to ping both outside ip addresses but not anything on the inside and I can not access anything on the inside of the other. Thanks for your help.

Re: Pix 501 vpn

scramer13 — Wed, 18 Jun 2008 17:25:00 GMT

Okay where I set now I appear to be having some type of dns issue. From my network that has internal ip 192.168.1.x I can ping the other networks internal computers. I can open up explorer and type \\192.168.20.3\apps$

(which is the apps folder on the DC) and get access to it. But I cannot do it by the computers name.