Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

vpn tunnel to perimeter

I work with a PIX515. Terminating a VPN tunnel (L2TP/IPsec connection) on the outside interface works fine. But my goal is to terminate the tunnel on a perimeter interface. I have tried several things but I can't get it to work.

Checking the syslog shows that the udp traffic on port 1701 reaches the interface on the perimeter network. But for some reason the firewall doesn't answer.

Has anyone established successfully a vpn tunnel to a perimeter interface? Can anyone help me? Sample Config?

Thank you.

Hans

2 REPLIES
Cisco Employee

Re: vpn tunnel to perimeter

You can terminate an IPSec tunnel on any interface on the PIX eg outside, dmz etc.

Make sure you enable isakmp on your dmz, for eg;

!

isakmp enable outside

isakmp enable intf2

!

crypto map test-intf2 interface intf2

crypto map test-out interface outside

http://www.cisco.com/warp/customer/110/client-pixhub.html

HTH

R/Yusuf

New Member

Re: vpn tunnel to perimeter

Dear Yusuf

Thanks a lot for your answer and the the link. That's right, I can terminate the tunnel on any interface as long as this interface is also connected to the "outside" world (as described in your link) but NOT when I have only one "outside" and the traffic must "flow" through the pix to the perimeter interface.

Greetings

Hans

95
Views
0
Helpful
2
Replies
CreatePlease to create content