Pix to Pix VPN using DHCP (DSL) Ip address

[karlvg]

I have just successfully setup a PIX to PIX VPN using a static IP address on each outside interface. The VPN is IPSec 3Des. The Pixs are a 515 (Work) and a 501 (Home).
Is it possible to for the VPN to work using a DHCP address for the outside interface that is assigned from my DSL ISP?
If so, how do I do this?
Thank you,
Karl

 

[yizhar]

HI.

It is possible but depends if the DSL will pass ip protocols like ESP.

You can try the new feature "Easy VPN remote". This requires pix version 6.2x at the remote side (home), but the office pix can have older ver 6.xx

The office pix will be configured to support VPN clients (same configuration as for "real" cisco software vpn clients), and the remote pix will be configured with "Easy VPN remote" using the new PDM or command line.

Again, dynamic IP should be fine, but if the DSL device is also doing PAT or is allowing only TCP and UDP then it will probably fail.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[karlvg]

Thank you for your reply.
So what you are saying is that I have to reconfigure the home PIX 501 using easy VPN? I see, the home PIX will act as a client VPN (like the 3.x client) to PIX VPN instead of a PIX to PIX VPN.
Then I would have to reconfigure the office PIX to except VPN clients?
With this setup, is the Cisco 3.x client able to connect to the work PIX?
Also, how is bandwidth handled? Is there any way to give certain connections more bandwidth than others?
Thank you for all of your help.

 

[yizhar]

HI.

Yes, you have described it correctly, but it can work only if the pix 501 is not behind PAT.
Yes, Cisco 3.x vpn clients will also be able to connect with the same credentials.

Pix does not have any bandwidth management features.
This can only be done with another device.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar