New to VPN, but need Help W/Setup, & understanding

[jamesch]

Our agency needs are growing, and we want users to work from remote locations, whether it is from a home computer or an agency laptop in the field. This is what we have now, and we need help as how to set it up, and what other components to buy to get it working, just someone to point me in the right direction that’s been there and done that, and can give me some recommendations.

One main office with a Cisco 2600 router then a Cisco PIX 515
Connected to
Five branch offices with each having a Cisco 2600 router
All have T-1 lines.
Hub and spoke config. Branch offices can not contact each other. Only main office can connect to all sites.

We want users to connect from home computers to the office they work at.

We have laptops that users travel across the state, and need to connect via, VPN.

Servers are Windows 2000, and Novell Netware 6.0, email is GroupWise 6.5, and home areas are on Novell, shared data is on Windows, i.e. common areas. We can setup email for users to POP3 in and get that. DNS/DHCP is windows.

We can install the Cisco VPN client, and our contractor for the router, and PIX said the PIX is setup for VPN, that we just need the VPN client installed on a computer. After that what needs to be setup and configured to Authenticate and have the users locate the proper data they need???????

 

[ChicagoTechNet]

Yes, PIX 515 comes with VPN and it works great. you just need to configure the firewall. here is a sample form

http://www.chicagotech.net/

How to setup split-tunnel on Cisco PIX

To setup VPN for Cisco VPN clients on Cisco PIX, you add the following lines:
access-list split permit ip 10.1.0.0 255.255.0.0 192.168.1.0 255.255.255.0
ip local pool bigpool 192.168.1.1-192.168.1.254
vpngroup vpn3000 address-pool bigpool
vpngroup vpn3000 dns-server yourdns
vpngroup vpn3000 wins-server yourwins
vpngroup vpn3000 default-domain cisco.com
vpngroup vpn3000 split-tunnel split
vpngroup vpn3000 idle-time 1800
vpngroup vpn3000 password ********


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[jamesch]

Thanks, I'll check it out, and If I have any more questions I will post it here.

Curtis

 

[jamesch]

P.S. I should have Noted this in the first post

We also have running is a ISA 2000 server. Right now it's just a proxy for internet, but we want to reconfigure it to do the firewall, and configure it in the DMZ along with the PIX and router.