VPN between 2 Pixfirewalls

[mikema]

our SITE collocated with ISP has pixfirewall 525,

we upgraded our firewall at office, using pixfirewall 515 instead of Watchguard SOHO, everything is fine except VPN to our Site.

How to configure the firewall at office correctly to make that every machine at office can connect VPN to our site?

[mns0523]

Here is a good place to start...the link below is a LANtoLAN configuration to connect the 525 and 515......

http://www.cisco.com/warp/public/110/38.html

--mike

[mikema]

Unforfunately,we didn't purchase IPSEC license on both of PIXs.

We can only use PPTP.

cisco has a topic

http://www.cisco.com/warp/public/471/pptp_pat.html

"Configuring PPTP Through PAT to a Microsoft PPTP Server"

but it does't fit for us, because it talks on router.

mike ma

[mns0523]

You should be able to get onto CCO and get a DES license for free. If you do not have a CCO login, you can email licensing@cisco.com, send them the PIX serial number and get a DES key that way. If it is a new PIX IPSec commands are already there. All you need is a DES key or you can purchase a 3DES key.

--mike