I did a post to one of the Cisco newsgroups recently about the CVPN3005
(formerly Altiga C5). Here you go:
== SNIP ==
Well, I have to hand to to Cisco. Good choice on the purchase of
Altiga.
I've done VPNs off of the PIX before, and can't say it was the easiest
thing I had ever done. My company was looking to roll out VPN on a much
larger scale, and my Cisco AM recommended against not sticking with the
PIX as 1) it's an older PIX (PIX10000), 2) it's also playing firewall for
our entire network, and 3) Cisco seems to be tossing most of it's
development in to the new unified Altiga/Compaitble Systems stuff.
So I went ahead and purchased a CVPN 3005 (formerly Altiga C5). I must
say, I'm quite impressed. Configuration is a little bit different then
I'm use to (the CLI isn't really CLI; it's more or less text-based menus),
and I normally cringe at the thought of an http-based configuration tool
.. but in this case it wasn't so bad.
The unit itself and the documentation still say Altiga all over (no Cisco
rebranding yet). IMO, the documentation sucks (more or less every command
gets an "overview", but not really a good explanation) but after 2 hours
of dinking around I now have a working VPN Server that supports IPSec and
PPTP (so I can continue to support our legacy NT PPTP RAS clients while
migrating them to the new 3DES IPSec client).
Other then a bug I ran in to in the first 3 minutes (trying to create
static routes from the console), I had no problems. I was able to create
static routes via the web interface, and a call to TAC revealed it indeed
was a bug. He made 2.2.1 (the patched 2.2.0) available for me on CCO, and
this immediately resolved the problem.
If anyone else is evaluating VPN solutions, make sure to take a look at
the Cisco CVPN3000 series. Neat little boxes, very scaleable .. I'm quite
[ Wrote 43 lines ]
[insanenet:doogles] [/home/doogles/Mail] > cat praise
Well, I have to hand to to Cisco. Good choice on the purchase of
Altiga.
I've done VPNs off of the PIX before, and can't say it was the easiest
thing I had ever done. My company was looking to roll out VPN on a much
larger scale, and my Cisco AM recommended against not sticking with the
PIX as 1) it's an older PIX (PIX10000), 2) it's also playing firewall for
our entire network, and 3) Cisco seems to be tossing most of it's
development in to the new unified Altiga/Compaitble Systems stuff.
So I went ahead and purchased a CVPN 3005 (formerly Altiga C5). I must
say, I'm quite impressed. Configuration is a little bit different then
I'm use to (the CLI isn't really CLI; it's more or less text-based menus),
and I normally cringe at the thought of an http-based configuration tool
.. but in this case it wasn't so bad.
The unit itself and the documentation still say Altiga all over (no Cisco
rebranding yet). IMO, the documentation sucks (more or less every command
gets an "overview", but not really a good explanation) but after 2 hours
of dinking around I now have a working VPN Server that supports IPSec and
PPTP (so I can continue to support our legacy NT PPTP RAS clients while
migrating them to the new 3DES IPSec client).
Other then a bug I ran in to in the first 3 minutes (trying to create
static routes from the console), I had no problems. I was able to create
static routes via the web interface, and a call to TAC revealed it indeed
was a bug. He made 2.2.1 (the patched 2.2.0) available for me on CCO, and
this immediately resolved the problem.
If anyone else is evaluating VPN solutions, make sure to take a look at
the Cisco CVPN3000 series. Neat little boxes, very scaleable .. I'm quite
impressed! I'm really looking forward to Cisco's hand in this
basket--they're promising merging the features of the Compatible Systems
(another VPN company Cisco recently bought) such as Linux, Solaris,
Windows 2000 support in to their new "Unified" IPSec client (one client
with the capability of connecting to whatever you have on the
backend--router, PIX, VPN Concentrator) in the very near future, so it
should be fun.
Not a Cisco employee obviously, just wanted to give you guys some insight
in to my experience with a new one of their toys. Next step: Migrating a
router we have terminating to the PIX over to the CVPN3005. Maybe I'll
let you guys know how that goes.
== /SNIP ==
: -----Original Message-----
: From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
: Sent: Friday, June 16, 2000 12:20 AM
: To: Mike Larson; [EMAIL PROTECTED]
: Subject: RE: IPSec and W2K Client?
:
:
: A couple of my colleagues at work have attended Cisco
: presentations of which
: this was one aspect. My employer is bringing Cisco in for a
: presentation of
: the CVPN 3xxx box in a couple of weeks. I hope to be able to
: attend, And I
: will check to see if this is part of the show. The folks I
: work with who
: have seen and played with the CVPN boxes are might impressed.
: If I get to
: the show, I will be sure to give a report.
:
: Chuck
:
: -----Original Message-----
: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
: Behalf Of Mike
: Larson
: Sent: Wednesday, June 14, 2000 6:27 PM
: To: [EMAIL PROTECTED]
: Subject: VPN: IPSec and W2K Client?
:
: I recently heard that Cisco will support the Microsoft
: Windows 2000 VPN
: client as an alternate to Cisco Secure VPN client. A friend
: of mine told me
: it was supported on PIX 5.1 and above. Has anyone tried this?
: What would be
: a good way to test this in a lab envrionment?
:
:
: __________________________________________________
: Do You Yahoo!?
: Talk to your friends online with Yahoo! Messenger.
: http://im.yahoo.com
:
: ___________________________________
: UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
: FAQ, list archives, and subscription info: http://www.groupstudy.com
: Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
:
: ___________________________________
: UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
: FAQ, list archives, and subscription info: http://www.groupstudy.com
: Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
:
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
