Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Router/ VPN installation

I am implementing a VPN (I'm a newbie) and I am currently allowing my server to do the routing. We are about 50 employees deep with 35 employees in our main office and 3-5 employees in our 4 branch offices. I have decided to go with the PIX-515 for the main office and 4 PIX-501's in the branch offices. I would also like to go with a hardware router solution for the main office to eliminate the overhead on my server. We currently have a fractional-T installed with 512kbps throughtput. We also have Linksys wireless routers in the branch offices. My questions are:

1) Do you have a router model/solution that would be appropriate for such a configuration that would work well with the PIX-515?

2) I am looking to upgrade my switch as well is there a Router/switch integrated product you could reccomment? or should I keep them separate?

3) What would be the best way to configure the connections for something like this? IE: from the MPOE connect to VPN (515) then to Router then to switch?

4) Could anyone provide a link or site that has some visual VPN/ Router fundamentals?

Thanks

1 REPLY
Community Member

Re: Router/ VPN installation

2) If you are expecting rapid growth then a solution with seperate devices would be better. Cisco does have integrated router-hub solutions. The ones that I know of are the 803 and the 804. Both support 10BaseT, 4 port Hub. The 800 is an ideal solution that is targetted at small offices and supports the entire spectrum of technologies, including VPN. If the users on your LAN are small enough in numbers, I guess this would be a good solution.

3) and 1) Your setup should look something like this:

Branch Office LAN -- PIX(501) -- Router -- <<>> --- router --- PIX(515) -- Central Office LAN

The firewall could be setup PIX to PIX, router to router or router to PIX. Configuring the router and PIX for VPN are similar tasks. The choice has to do with throughput based on the devices ability and your security posture and preferences.

4) The following links are rich with information on IPSec VPN's.

Configuring IPSec Network Security- Basics

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur_c/scprt4/scipsec.htm

Configuring IPSec for PIX firewall

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur_c/scprt4/scipsec.htm

Configuring a Simple PIX-to-PIX VPN Tunnel Using IPSec

http://www.cisco.com/warp/public/110/38.html

Configuring IPSec - Router to PIX

http://www.cisco.com/warp/customer/110/39.html

Configuring IPSec Manual Keying Between Routers

http://www.cisco.com/warp/customer/707/manual.shtml

229
Views
0
Helpful
1
Replies
CreatePlease to create content