CISCO VPN

[ali.asghar]

What is the major difference between doing VPN through PIX or VPN3300 Concentrator box.

The customer has a PIX (510) connected to ISP with Full T1. They also have 4 branches and need a VPN solutions to connect to headquarter through Static VPN. The connections from remote offices are DSL circuit so it means that the customer will have to buy Cisco DSL box for vpn tunneling. Am I Correct? Can PIX do this? or they will have to purhcase a specific DLS/VPN Box. Cusotmer also need a Internet Connections as well as connection to the headquarter network simultaneously form all the branches.

Can ISDN dialback be replaced with VPN solutions for WAN Connections?

Regards,

[edadios]

vpn3000 is maily for terminating client vpn.

pix is mainly for firewall security feature.

The vpn3000 has vpn feature that are not available on the pix.

The vpn3000 does not do nat as good as pix.

pix501 with latest version 6.2 can be configured for pppoe.

ipsec vpn is a lower cost dedicated link betrween corporate to corporate being run through internet.

Hope this answers your question.

Regards,

[ali.asghar]

Thanks Edadios. So you are suggesting if customer has PIX 510 already in the corporate network then for the remote branches the better choice would also be PIX for their DSL circuit rather than rather than other VPN boxes for DSL etc.

From the remote branches customer wants to have users to connect to the headquarter network as well as browsing the Internet. Is it possible?

Regards,

[hchebli]

Hi Ali;

There two things to watch out for;

1. People are experiencing VPN issue when running across DSL

2. People have experienced disconnections of VPNs when there are more than 1 terminating on the same interface on the pix.