PIX, ASA or VPN concentrator & dynamic VPN

johnleeee · ‎10-27-2008

Hi all,

I need help what to use and how to do next.

What we need is to create remote VPN for many users so that every user is member of more than one group and every group is linked to predefined set of rules, for instance you can access this IPs, ports and so on.

How to do that dynamically? Is it possible to do that with one certificate?

Other question is what to use? ..PIX, ASA, VPN concentrator ?

BR

jl

JORGE RODRIGUEZ · ‎10-28-2008

John, PIX500 series and VPN concentrators are EOL, use the ASA series for VPNs.

For predefined set of rules requirements it is very possible, you can start looking at using vpn filters, have a look here.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9a87.shtml

All other ASA config examples.

http://www.cisco.com/en/US/products/ps6120/prod_configuration_examples_list.html

ASA5500 series platforms detailed specs

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

HTH

Jorge

Jorge Rodriguez