Solved: PIX Version 7

cisco.learner · ‎03-12-2006

Hi,

Long time to seen. Happy Chinese New Year!

I am upgrade to version 7. I need knowing good and bad.

jackko · ‎03-15-2006

i believe the 837 is currently running in bridging mode.

assuming the pix is upgraded to v7, then the 837 will need to be re-configured from bridging mode to routing mode in order to handle the dsl as well as the pppoa/pppoe.

regarding vpn, pix may still be used as the vpn termination point. if this is preferred, then port forward needs to be configured on the 837 (udp 500, and udp 4500), and typical vpn codes on pix.

View solution in original post

jackko · ‎03-12-2006

just wondering what the current topology. assuming there is an adsl with pppoe, then it is a little bit more complicated since v7 doesn't support pppoe.

further, vpn configuration has also been modified slightly.

and of course, lots of new feature supported by v7 such as multiple context (i.e. virtual firewalling), and transparent firewalling.

cisco.learner · ‎03-13-2006

Hi,

How I check pppoe is here? I have router 837. Also, what VPN configuration change? Now, only VPN client come in the PIX.

jackko · ‎03-13-2006

verify whether the codes below are in the pix current config or not, as these are for pppoe:

vpdn group pppoe_group request dialout pppoe

vpdn group pppoe_group localname

vpdn group pppoe_group ppp authentication chap

vpdn username password

cisco.learner · ‎03-14-2006

Hi,

Yes, it is the config. What can I fix the problem? We must upgrade version 7. The main important is VPN.

jackko · ‎03-15-2006

i believe the 837 is currently running in bridging mode.

assuming the pix is upgraded to v7, then the 837 will need to be re-configured from bridging mode to routing mode in order to handle the dsl as well as the pppoa/pppoe.

regarding vpn, pix may still be used as the vpn termination point. if this is preferred, then port forward needs to be configured on the 837 (udp 500, and udp 4500), and typical vpn codes on pix.