vpn 3060 and pix 535 ,vpn client should be end on which and why

[p.emery]

hi

I would like to install a pix 535 for giga interface.

and 350 customer want to do vpn teunnel to this PIX or Pix, i belive it is better to finisch it on vpn3060 and to live the PIX to do encrypted tunnel to other PIX and to make is FW fonctionnality too ? (less cpu used on pix without vpn client )

what may i use to manage the 350 client ? could i use tacacs + together with NT2k ?

thanks for your helps

best regards

[smahbub]

If you are trying to setup a VPN connection to the network via a remote client that happens to be running a 350 Wireless setup, the 350 has nothing to do with it (provided that is working normally and setup already). You’ll be running the VPN client software on the remote device and terminating at a 3000 Concentrator is a better and easier to manage solution for remote access. The PIX can handle it well too and if you only have this one or maybe a couple clients (besides the PIX to PIX tunnel) you might just terminate it on the PIX. Hope this helps.