Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Multiple vpngroups on pix

I would like to configure multiple vpngroups on a pix 515 running 6.1(4) code. Clients will be outside PC's running cisco secure client for whatever OS they run. I have configured access for one group already can I get a link to tech article that shows config for multip vpngroups? I have questions on access list, isakmp policy and dynamic-map areas of configuration.

1 REPLY
Cisco Employee

Re: Multiple vpngroups on pix

Here's one:

http://www.cisco.com/warp/public/110/pixcryaaa52.shtml#howto2

Basically isakmp policy is not configured per group, the VPN client will run through each policy from the top down until it finds a match, you can't have one group use this policy and one group use that policy. Same goes for dynamic-crypto maps and the transform set.

Access-lists for split tunnelling can certainly be dofferent, as can address pools and WINS/DNS servers.

224
Views
0
Helpful
1
Replies