Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN Question

I have a group of individuals who I would like to give VPN access into our network (via PIX 515). The only thing I would like them to be able to do is access an AS400 which is actually outside our network (connected via dedicated T1). I don't want them to be able to access any other internal network resources. I currently have a VPN group set up (for IT) which has access to all network resources as well as the AS400. Can this be done?

4 REPLIES

Re: VPN Question

Yes it can be done. Here's a link to a configuration example.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9a87.shtml

Hope that helps.

New Member

Re: VPN Question

I'm having some issues getting this going. I'd like to post my PIX config and log. I've scrubbed all the public IP addresses. Is it necessary to scrub my internal addresses?

Re: VPN Question

You can leave the internal IP's.

New Member

Re: VPN Question

Here you go. The host I want my VPN group (lblwaco) to be able to access is z.z.z.1

108
Views
0
Helpful
4
Replies