cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
313
Views
0
Helpful
1
Replies

PIX 506E configuration question

Hi

I have a pix connected to 2 remote sites (1 & 2 vpn 3000 concentrator on both end sites) I would like to configure the PIX having a principal server (site 1)and a secondary server (site 2)in case principal tunnel fails the second become active

If posible to have this kind of config on a PIX 506E?

Thanks a lot

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Yes you can have 2 entries under your crypto map statement ie.

crypto map vpnset 1 ispec-isakmp

crypto map vpnset 1 set peer "site 1 vpn3000 ip address"

crypto map vpnset 1 set peer "site 2 vpn3000 ip address"

...

The pix will use the 2nd site vpn 3000 if it doesn't get a response from site 1 vpn 3000.

HTH

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: