PIX 501VPN

[mhel]

Anyone here who can help me how to setup VPN config using 3DES

thanks in advance

mhel

[mostiguy]

Site to site vpn? End user vpn?

[sampathsr]

For site-to-site VPN:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800eb72b.html#10223

for remote-access VPN:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800eb72d.html#36421

go through these articles..they are worth the HTML page posted on!! also, it is not scary at all, try a test setup with remote access, or a scheduled maintenance window, if the firewall is already in production...

also, what is on the other side, another Cisco device or a non-Cisco?

Best regards / Sampath.

[mhel]

thanks.

It is a site-to-site VPN.At the other end, is a non-cisco device

[pcomeaux]

You will find examples of how to configure site to site to 3rd party devices, along with other types of configs, at the following location:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html

peter

[sampathsr]

as long as the other non-cisco device supports IPSEC, you should have no issue..

to configure PIX and checkpoint 4.1, read through:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008009420f.shtml

to configure PIX and checkpoint NG, please read through:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800ef796.shtml

hope this helps

Best regards / Sampath.

[mhel]

I have a question regarding in upgrading or modifying activation key (3des)in a a PIX 501 OS 6.1(2)

How can i modify the activation key w/o downloading any software image?

I have the key emailed by cisco.It states that in PIX OS 6.1 you will need to download the image but in 6.2 you can use the activation-key command.

Is theres any work around for this?

thanks

Mhel

[sampathsr]

Hi:

I am not so sure of 6.1.. i will refer one of the old guides i have at home and will try to reply with the steps..

in 6.2 it is a breeze..just use the activation-key command...

6.2 is fairly stable..u could upgrade anyway, before doing the 3des upgrade..

best regards / Sampath.