Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Pix PPPoE to concentrator - is this an easy question?

I am trying to move a remote site's vpn connection from our pix to our concentrator, but it doesn't appear that the concentrator allows for a 0.0.0.0 peer address. How does the concentrator address pix devices that use PPPoE?

Thanks for any and all assistance.

3 REPLIES
Gold

Re: Pix PPPoE to concentrator - is this an easy question?

i believe you are referring to the pix running with dynamic ip address.

if so, you may configure the concentrator as ezvpn server; whereas the pix acts as the ezvpn client. the catch is that only the pix side is able to initiate the vpn.

to configure concentrator:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800945cf.shtml#maintask1

to configure pix:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008019e6d7.shtml#client

New Member

Re: Pix PPPoE to concentrator - is this an easy question?

Thanks, will try this tonight, and let youknow the results tomorrow.

Thanks again.;

New Member

Re: Pix PPPoE to concentrator - is this an easy question?

I don't think I explained myself well. What I need is something like this http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2284/products_configuration_example09186a00801dd672.shtml but that allows you to do so with a lan to lan connection, not modify your base group configuration (we have users who connect via groups, and I don't want to modify the IPsec SA for other lan to lans we have configured that are using a pix, but have a static IP). Won't setting the preshared key in the SA affect other connections that also use that SA, or if they are specified in the settings for the lan to lan, will that override? I could test this, but if I am right, and it does, it will take down the other 2 sites, which use a different pre-shared key... There has to be a way to do this!

Thanks in advance,

Suzanne

109
Views
0
Helpful
3
Replies
CreatePlease login to create content