PIX 501 VPN Question

[FrankieAIX]

Does the PIX 501 support VPN connections out of the box? Or are there additional licenses that need to be purchased?

Can somone point me in the direction of a good tutorial on how to configure VPN on the 501 please..

To give a brief overview of my setup, I have a 501 connected to my cable modem and would like to be able to VPN into my home network from anywhere on the net. The PIX is the DHCP server for the private home network.

Thanks in Advance!

-FrankieAIX

 

[colinT23]

Hi,

Yes it does, upto 10 simultaneous connections (site to site or remote access VPN's). You don't need to buy any additional licenses. From what you describe, you are going to need a Remote Access VPN. Have a look at this link:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009442e.shtml

Alternatively, use the PDM VPN Wizard to setup your VPN. Ideally, you will need a static IP address on your cable modem.

Regards Colin.

 

[FrankieAIX]

Colin,

Thank you for the information!

I just have one more question, unfortunately I will not be able to get a static IP for my external interface. Is there a way to configure this to work with the external interface using DHCP??

Thanks Again for your help!!

-FrankieAIX

 

[pankajchawla]

Dynamic DNS can be an option if PIX 501 does supports this.

 

[FrankieAIX]

When configuring VPN access on the PIX do I have to be concerned with configuring a Access List to avoid NAT?

!--- Access list to avoid Network Address Translation (NAT)
!--- on the IPSec packets


I am referencing the line from the following document:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009442e.shtml

I am concerned with this because my external interface is not static due to my Cable Connection. Is there another way to address the Access list to avoid NAT or is it not necessary?

Thanks in advance!

-FrankieAIX

 

[FrankieAIX]

Should I be concerned with this?

-FrankieAIX