Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

edw
New Member

VPN configuration PIX or Router

Hi,

I have a network with a 3660 on the perimeter and a PIX520 before my inside network. I want to allow external workers access to our network through VPN. I have read some documents and wanted to know - which is better to use a 3660 router or a PIX to establish the VPN tunnel ??

If PIX - do I have to produce a static IP for the outside interface which everyone can see ?

Reason for that question is that my traffic is NAT from the firewall to the 3660 and then NAT again to the outside ip range. so the pix outside card is a private address range at present.

Thanks for any help or thoughts on this

Ed

2 REPLIES
New Member

Re: VPN configuration PIX or Router

Hi Ed,

I would recommend you to use PIX for vpn termination over 3660.And you need static public IP address for the outside interface.Incase you don't want to change your network NAT structure then you can use encryption card on 3660 to enhance its encryption and tunneling performance.

cheers

Sachin

edw
New Member

Re: VPN configuration PIX or Router

Hi,

Thanks for this - I'm looking into the module. I presume I would use the 3660 if I used the card rather than the PIX or would the card just pass trafic to the pix and the pix still etablish the tunnel ?

Could I use a static NAT on the 3660 for the PIX card ? Isnt this a security problem or should I say a bit more open if the PIX interface cards have public ips ?

Thanks

Ed

92
Views
4
Helpful
2
Replies