Newbie VPN question regarding PIX

[moconnor]

Hi,

I need to create a site to site VPN, I have at the head end a PIX 515e. Behind that is a win2k network with a DC for authentication. The remote site users needs to be joined to and authenticate to that domain controller over a VPN.

The two sites connect to the internet by a cable modem and the remote site will have at most 10 users behind the PIX/VPN.

Here is my question(s):

What type of PIX hardware does the remote site need? A 501/506, or something else.

Do I need any VPN concentrators, etc at the head end?

How the heck to I make it work??

Sounds simple right? I greatly appreciate any help as I am a bit stumped. Thanks in advance.

Marc

[mostiguy]

A 501 is all you need at the remote end. If you only have < 10 machines there, get a 10 user licensed 501. I

[moconnor]

Thanks! The 501 will suit my needs just fine....and not to badly priced either. Now if someone has a VPN starter kit that would be great. Still not sure how to have the remote authentication through a VPN. Thanks in advance-

Marc

[jmia · Accepted solution]

Hello Marc,

Here's a example of PIX-to-PIX VPN using IPSec:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml

Also, lots more examples here to get you going, all TAC authored:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html

Hope this helps - Jay

[moconnor]

Jay,

This is perfect. Thanks for your help. The Cisco site often has so much info that I have trouble nailing down exactly what I need.

Marc