I curently use a PIX 506. We are looking to upgrade to a PIX 515. However, there is an issue I would like to address before we decide exactly what hardware to purchase. We will have, in the near future, 100-200 remote VPN sites all connecting via VPN hardware(PIX or Concentrator) to our main site. What I want to avoid is having to re-configure all of the remote sites if our main site should happen to change it's IP address(our ISP goes under, sells, etc.) I thought of pointing the remotes to a domain name so that the IP could be changed with a registrar, but PIXs and Concentrators aren't able to resolve IPs from a domain name(at least that I know of anyway). If anyone has any ideas on how I might be able to accomplish this, please fire away!! If you want to email me, it's firstname.lastname@example.org. Thank you all for you time.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...