Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Site to Site VPN with 2 PIX and DSL

Hi. I am wondering if it is possible to connect 2 PIX that are connected to the Internet by DSL Modems to create a Site to Site VPN.

Private--Pix--DSL--Internet--DSL--Pix--Private

The DSL Modems each have a static public ip address assigned by the ISP (64.xx.xx.xx).

Is this possible? What would I put in

isakmp key xxxxx address command?? What would I put in the

crypto ipsec policy zz set peer command??

Thanks in advance!

2 REPLIES
Gold

Re: Site to Site VPN with 2 PIX and DSL

static nat, and inbound acls need to be configured for pix outside interface on the dsl modem. further, it may not be feasible providing each site has only one public ip. the reason being that lan-lan vpn requires esp (i.e. ip 50), which is unlikely to be supported by port forwarding on dsl modem.

i would suggest you configure both dsl modem into bridging mode, and configure the static public ip directly on the pix outside interface. it would be less complicated to implement and manage.

Community Member

Re: Site to Site VPN with 2 PIX and DSL

Mr.Jackko,

Could you provide the cmds for the static nat and inbound acl to be configured on dsl modem.

Also what is the commands needs to be used on PIX fw.

Thanks

Arumugasamy

131
Views
0
Helpful
2
Replies
CreatePlease to create content