PPPoA

[colinT23]

Hi Guys,

I'd like to use a PIX 501 to protect a network connected via BT DSL. In the UK we use PPPoA as opposed to PPPoE and as such, I can't find a way to use the PIX. Anyone know how I can achieve this ? I though if using a DSL modem in bridged mode but I can't see how the PIX can then authenticate as it doesn't support PPPoA. Any help appreciated. TIA.

Regards Colin.

 

[KiscoKid]

The PIX doesn't have any PPPoA support. Your DSL modem/router before the PIX will have to handle all authentication requests.

 

[colinT23]

Hi KiscoKid,

Thanks for the reply. I haven't got a problem with this but if the DSL modem/router handles the authentication, how do I get it to pass the 'real' Public IP address to the outside interface of the PIX ? I thought that the only way to achieve this was to get the DSL device to use 'Bridged Mode', thereby passing the public ISP assigned IP address to the outside of the PIX. Are you aware of any devices that can help me achieve this ? TIA.

Regards Colin.

 

[nnnn3333]

You can use the speedtouch 510/546 series. In spoofing mode. Change the lease time to 7200.

 

[normntwrk]

I had the same issue with a DSL circuit in Jamaica. I ended up using a Cisco 877 router which suppports PPPoA and it took the place of the Speedtouch modem and a VPN firewall behind it which I couldn't get to work as a VPN. I now have everything working OK with 3 877's in 3 locations down there with 2 VPN's(2 depot locations connected to a central site)

Norm

 

[colinT23]

Hi normntwrk,

I'm new to Cisco Routers. I can configure a PIX VPN but I'm struggling with the 877 Router. I've used the SDM to configure the firewall and VPN access (the router is setup as an Easy VPN Server). All appears well, I've got internet connetcivity, port scans show no obvious vulnerabilities, but I'm struggling to get the VPN to work correctly. Using the Cisco VPN Client (4.8) I can establish a VPN. I get the XAuth prompts etc and the VPN comes up. My problem is that although I can ping PC's on the remote network, I can't access them either by name or IP address. Funnily enough, from the remote LAN, the PC's can connect to the machine connected by vpn client but not the other way around ! So I'm thinking that the solution can't be far away but I've drawn a blank. Any ideas ? Many thanks.

Regards Colin.