Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

2 vpn group for different purpose in Pix Firewall

Hi,

I'm trying to configure 2 group of user who will access different servers in different segment. Anyone have any idea or implement before? I try to search for the documentation but could not find any? Appreatiate your help and thanks in advance.

regards,

Sam

3 REPLIES
Cisco Employee

Re: 2 vpn group for different purpose in Pix Firewall

Just create two set's of "vpngroup" commands using different group names. Assign each of these different groups a different IP address pool within the PIX. Then you can set up access-lists on your internal network to only allow each pool of addresses access to certain internal hosts.

Similarly, you could assign each group a specific split-tunnel network list, and only allow each group access to certain internal hosts that way.

Community Member

Re: 2 vpn group for different purpose in Pix Firewall

and what about the

isakmp client configuration address-pool local dealer outside

one can only add one pool, so what is this for ?

thanks uli

Cisco Employee

Re: 2 vpn group for different purpose in Pix Firewall

You don't need this command if you're using the VPN Client. Just do the following to assign two different IP pools:

vpngroup group1 address-pool ippool1

vpngroup group2 address-pool ippool2

ip local pool ippool1 10.1.1.1-10.1.1.254

ip local pool ippool2 10.2.2.1-10.2.2.254

185
Views
0
Helpful
3
Replies
CreatePlease to create content