cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
229
Views
0
Helpful
1
Replies

VPN on PIX506E

techtips03
Level 1
Level 1

I am trying to create a VPN between 2 locations (site A& site B) on PIX506E and at the same time I am also configuring the same pix for remote VPN users to use Microsoft PPTP VPN to connect to Site A. Can someone please confirm if this config works?

ip address outside <public ip> 255.255.255.240

ip address inside 172.16.1.1 255.255.255.0

nat (inside) 0 access-list nonat

nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

<VPN config between site A and site B>

<172.16.2.x is the site B LAN range>

access-list nonat permit ip 172.16.1.0 255.255.255.0 172.16.2.0 255.255.255.0

access-list outside_cryptomap_vpn1 permit ip 172.16.1.0 255.255.255.0 172.16.2.0 255.255.255.0

sysopt connection permit-ipsec

crypto ipsec transform-set vpn1 esp-3des esp-sha-hmac

crypto map VCVPN 1 ipsec-isakmp

crypto map VCVPN 1 match address outside_cryptomap_vpn1

crypto map VCVPN 1 set pfs

crypto map VCVPN 1 set peer <remote public ip>

crypto map VCVPN 1 set transform-set vpn1

crypto map VCVPN interface outside

isakmp enable outside

isakmp key ******** address <remote public ip> netmask 255.255.255.255 no-xauth

isakmp identity address

isakmp policy 1 authentication pre-share

isakmp policy 1 encryption des

isakmp policy 1 hash sha

isakmp policy 1 group 1

isakmp policy 1 lifetime 3200

<VPN config between site A and PPTP users>

access-list nonat permit ip 172.16.1.0 255.255.255.0 192.168.1.0 255.255.255.0

ip local pool vpn-clients 192.168.1.10-192.168.1.50 (pool for PPTP clients)

sysopt connection permit-pptp

vpdn group 1 accept dialin pptp

vpdn group 1 ppp authentication pap

vpdn group 1 ppp authentication chap

vpdn group 1 ppp authentication mschap

vpdn group 1 ppp encryption mppe auto

vpdn group 1 client configuration address local vpn-clients

vpdn group 1 client configuration dns <ISP DNS IPs>

vpdn group 1 pptp echo 300

vpdn group 1 client authentication local

vpdn username test password password1

vpdn enable outside

Appreciate your time on this

1 Reply 1

techtips03
Level 1
Level 1

Please ignore this post. I installed this yesterday and it is looking good for now. This may help for someone who want to install in the same manner

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: