Solved: PIX 501 with Actiontec Q1000 in bridge mode

chris.lantz · ‎09-08-2010

I have an Actiontec Q1000 on a Qwest circuit with 8 static IP's. I'd like to put the Actiontec into bridge mode and connect the PIX to it. I have configured the PIX as follows, but there are some things that aren't clear to me:

ip address outside pppoe setroute

vpdn group chi request dialout pppoe

vpdn group chi localname xxxxx

vpdn group chi ppp authentication pap

vpdn username xxxxx password xxxxx

Qwest gave me a block of 8 IP's, and they specified one of them as a gateway address.

What IP will the outside interface get?

Can I use setroute with Qwest, or do I need to specify a default route instead?

Should I assign the gateway address to the outside interface of the PIX?

My ultimate goal is to be able to setup the PIX to allow incoming Cisco VPN software client connections.

Thanks so much for all feedback.

P.S. I can't just try it, since I'm in Calif. and I need to configure it and send it to Utah, where I will access it via SSH.

Panos Kampanakis · ‎09-09-2010

The ip will be given by the provide during the PPPoE negotiation.

You should be able to use set route, I would expect Qwest to be providing the default route in PPPoE.

I should get it from the ISP automatically.

Please rate helpful posts.

PK

View solution in original post

Panos Kampanakis · ‎09-09-2010

The ip will be given by the provide during the PPPoE negotiation.

You should be able to use set route, I would expect Qwest to be providing the default route in PPPoE.

I should get it from the ISP automatically.

Please rate helpful posts.

PK

chris.lantz · ‎09-18-2010

Thank you for your reply. It did in fact work that way.

For future reference, the "gateway" address that Qwest listed when I ordered the block of 8 ip's, was the address that the PIX received when connecting via PPPoE.