site to site vpn

[orbitbahrain]

Hi,

Can we setup site to site vpn using Broadband internet connection. we get different Public address on our Nortel every day . with this situation can anyway we can setup a site to site vpn with other side cisco PIX.

If possible what is the needed configuration needed in both side.

Any response is highly appreciated.

Thanks

[ex_pmadayag]

hi,

Yes, for as long as the pix has a static wan ip address, you can setup vpn site to site even if the other peer has a dynamic ip.

You just need to configure the pix firewall to accept dynamic vpn connections.

check the ff links:

>> if you are using pix 6.3 and lower

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a0080094680.shtml

>> if you are using pix ver 7

https://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805733df.shtml

Hope this helps.

[sbantz]

I wish they had bolded the necessary configuration changes in the version 7 document. The comments and boldfaced type in the ver 6.3 instructions was easy to see.