Solved: setup pix501 vpn

rhopkins_nci · ‎09-17-2007

I have a pix 501 6.3(5), with these license features:

Failover: Disabled

VPN-DES: Enabled

VPN-3DES-AES: Enabled

Maximum Physical Interfaces: 2

Maximum Interfaces: 2

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Inside Hosts: Unlimited

Throughput: Unlimited

IKE peers: 10

My questions are, how many vpn's can I have, site to site and or remote user vpn's? Lastly, how do I create the remote host vpn's? Should I do this thru the cmd line or web based? Or does anyone know of a link or guide explaining the vpn setup on this model. If anymore info is needed let me know. Thanks in advance.

Jon Marshall · ‎09-18-2007

You can use L2TP over IPSEC from a windows client. Attached is a link to a doc for configuring L2TP over IPSEC between a pix firewall and a w2k pc. It should apply to XP as well.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800942ad.shtml

HTH

Jon

View solution in original post

Jon Marshall · ‎09-17-2007

Hi

It means that you can have 10 VPNs and these VPNs can be site-to-site, remote access or a mixture of both but no more than 10.

I don't really use the web based tool as i tend to do all config on CLI. Attached is a link to some example config docs for remote access vpns to pix firewalls.

http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html#anchor12

HTH

Jon

rhopkins_nci · ‎09-18-2007

Thanks Jon, I was looking thru some of the guides, are there guides on configuring a remote host without the cisco vpn client, or is it even possible? Can I use the built in xp client? Thanks again.

Jon Marshall · ‎09-18-2007

You can use L2TP over IPSEC from a windows client. Attached is a link to a doc for configuring L2TP over IPSEC between a pix firewall and a w2k pc. It should apply to XP as well.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800942ad.shtml

HTH

Jon

attrib7575 · ‎03-20-2008

I dont think it applies to XP as well. I can get a 2000 client to work, but not an XP one