PIX VPN to DHCP

[DocHolden]

We are replacing our old firewall with a Pix 515. We have several VPN tunnels out to users homes and I need to know does the Pix support VPN to a DHCP address on a SOHO or does it have to be static? Thanks in advance.

 

[jmconsulting]

No, it does not have to be a static IP. It supports both static and dynamic connectons based on the client/firewall confituration. I have both tunnel connections via 515e and 501 tunneling and then client vpn to the 515e via dhcp.

 

[DocHolden]

Thanks for the information.

 

[wybnormal]

If you configure the 515 properly (RAM) and load it with 7.x code, you can use SSL VPNs which gets around alot of the issues with IPsec and home/mobile users. I find that SSL is more robust with crappy connections than IPsec and it works better with the slipshod security at the various coffee houses.

MikeS

http://www.packetattack.com

http://www.packetpress.net

Home of the book "Network Security Using Linux"