How do I assign the PIX 501 peer address in a 3030 concentrator?

jkeeffe · ‎03-28-2003

The PIX 501 will be configured using EZVPN in client mode. But the 501 will be assigned its public IP address by the ISP using DHCP - so this address could change at times. How do I configure the 3030 concentrator, which is the head end of this tunnel, where it asks for the peer address?

afakhan · ‎03-28-2003

Hi,

you dont need to configure a L2L for a pix which is configured in EZVPN client mode, you will need to configure a group on the vpn3k, just like you configure for vpn3000 sw clients.

if pix-501 outside ip address changes during the lifetime of ipsec connection to the vpn3000 concentrator, session would get dropped bcoz of keepalives.

hope it helps.

Thanks,

Afaq