Basic questions about adding IPSEC clients to IOS firewall

rduke · ‎03-06-2007

I have an IOS firewall (2811 router) with WebVPN and SSL VPN clients already in use. This works OK, but my Macintosh computers don't work with SSL VPN so I was looking at adding IPSEC clients to the same firewall for the MACs.

1. Question 1 - will this work ?

2. Question 2 - How would this be configured. Do I have to set up a different gateway on the router using a different external IP than my WebVPN and SSL VPN gateways ?

Thanks for any input. I am new to configuring these boxes.

Randy

kaachary · ‎03-06-2007

1: This will work.

2: No, you can use the same public interface for terminating IPSec connections.

Check this doc for MAC client config :

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00800945d3.shtml

And this doc for Router's config for IPSec :

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801c4246.shtml

Hope this helps.

-Kanishka