PIX506E <=> PIX515E

[ph0enix]

I need to set up two facilities with the above PIX modells. The 515E has software version 7.01 (ASDM 5.02) - the 506E has (6.3/PDM) - I need to create a static VPN tunnel between the two external interfaces which have dynamically assigned IPs (from the ISP). The 506E building does not have any servers and I want to set it up so all the broadasts and DHCP from the main building (515E) get forwarded to through the tunnel so the systems obtain their IPs and windows domain authentication from the servers in the main building. How do I go about doing that?

Thank you!

[mpalardy]

What you want to do is called a site-to-site VPN.

With ASDM it is an easy task to create what you require. You may use the VPN wizard to start. It does a great job when starting from scratch.

With PIX 6.3 it is a quit harder task but you may use the config created from 7.0 and adapt it to make it work for 6.3.

You'll get plenty of examples under these links:

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a87f7.shtml

http://cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_configuration_example09186a00804675ac.shtml

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/sit2site.htm

HTH

Mike

[Patrick Laidlaw]

ASDM is pretty much the same thing as PDM. the pix 506 has the ability to have PDM installed and use the same vpn wizard as ASDM.

Patrick

[ph0enix]

Good to know. Thank you! ...any idea how to configure the two?

[ph0enix]

Excellent examples. Thank you very much!

Believe it or not I feel lost in ASDM.