PIX 515 Site-to-Site VPN

[HQABMC2004]

We have three sites (A,B and C) and these site are connected thru LAN2LAN IPSEC Tunnels (Mesh configuration on PIX515E's in failover mode) and remote VPN (on A and B) to accept IPSEC VPN connections (Cisco VPN Client). I can access resources between the sites and remote VPN client.

We have 20 branch offices. All these branch offices are connected to Internet thru ADSL (Three with static IP's and 18

with dynamic IP's). We are planning to deploy PIX506E at these branch offices.

I would like to know how to configure IPSEC tunnel between PIX at branch offices with dynamic IP and PIX at Site A or Site B.

Thanks,

Srinivas

[gfullage]

If you already have VPN clients coming into A and B then you simply set up the remote PIX's as EzVPN clients also (they connect just like a VPN client would).

Here's a sample config showing the PIX client and head end configs (the head end config you should already have in a similar form for the VPN clients).

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_configuration_example09186a008019e6d7.shtml