2 vpn group for different purpose in Pix Firewall

ccsam · ‎07-11-2003

Hi,

I'm trying to configure 2 group of user who will access different servers in different segment. Anyone have any idea or implement before? I try to search for the documentation but could not find any? Appreatiate your help and thanks in advance.

regards,

Sam

gfullage · ‎07-11-2003

Just create two set's of "vpngroup" commands using different group names. Assign each of these different groups a different IP address pool within the PIX. Then you can set up access-lists on your internal network to only allow each pool of addresses access to certain internal hosts.

Similarly, you could assign each group a specific split-tunnel network list, and only allow each group access to certain internal hosts that way.

Iske · ‎07-17-2003

and what about the

isakmp client configuration address-pool local dealer outside

one can only add one pool, so what is this for ?

thanks uli

gfullage · ‎07-17-2003

You don't need this command if you're using the VPN Client. Just do the following to assign two different IP pools:

vpngroup group1 address-pool ippool1

vpngroup group2 address-pool ippool2

ip local pool ippool1 10.1.1.1-10.1.1.254

ip local pool ippool2 10.2.2.1-10.2.2.254