RE: PIX VPN Client Configuration - At my wit's end! [7:74363]

[Deepali S]

Hi James,

 First and foremost please make sure that the inside ip address of the pix
and the VPN address pool are of different range since there is a BUG
associated , i would recommend you to use an entirely different range of
address pool.

 What is the client version you are using? If you are using Cisco VPN client
3.6.x and above then please change the hash type to md5 as Cisco VPN client
3.6.x doesnt support sha .

  isakmp policy 1 md5

 Pls read check this link:

 http://www.cisco.com/warp/public/707/ipsec_debug.html#inability

 Just let me know if you have any queries.

 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74636&t=74363
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: 2501 VPN [7:73977]

[Deepali S]

Hi 

 You can check this link:

 http://www.cisco.com/warp/public/707/overload_public.html

 
http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Internetworking:IPSec&s=Implementation_and_Configuration#Samples_and_Tips

 Just let me know if you have any queries.
 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74638&t=73977
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: PIX VPN Setup [7:74369]

[Deepali S]

Hi! John,

 The isakmp and pre-share key is used only when you have the L2L tunnel
setup.
 When you have a VPN tunnel between Client and PIX , the command below is
same as the isakmp and pre-shared key.

 vpngroup VPNUSER password  
 
 Spli tunneling is used when you want the user to browse the internet when
he still has a VPN tunnel established.

 Pls check this link to know more abt split tunneling: 

 http://www.cisco.com/warp/public/707/ipsec_debug.html#inability

 Let me know if you have any queries.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74635&t=74369
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: PIX- DMZ [7:74422]

[Deepali S]

Yeah! u need to put in the command sets on the PIX .

 First step you would like to put would be the nat and global commands.

 Second you would need to specify the routes for the dmz.

 Pls let me know if you owuld like to know the syntax of the command.

 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74634&t=74422
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: PIX Firewal Software Version [7:73894]

[Deepali S]

Hi ,

 I would suggest you to use PIX 6.2 software rather than 6.3.1 , since this
has a lot of BUGs , you can download the latest PIX software version 6.3.2

 Let me know if you have any queries.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74639&t=73894
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ACL for DMVPN [7:74028]

[Deepali S]

Hi , 

 DMVPN is used when you have HUB and spoke topology and you want to pass
other than IP traffic through the VPN tunnel.
 
  You have to open up ports for GRE and please check these links which gives
you a sample config for DMVPN.

 http://www.cisco.com/warp/public/471/dcmvpn.html
 
 http://www.cisco.com/warp/public/707/dmvpn-gre-ospf.html

 Let me know if you have any queries or if you would like to know more abt
DMVPN.

 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74645&t=74028
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: PIX License upgrade procedure [7:73769]

[Deepali S]

Hi Hitesh,

 If you want to upgrade the license to 3DES please write to
[EMAIL PROTECTED] with the following details:

 1.No.Of Interfaces on PIX
 2.Serial Number 
 3.PIX Model number
 4.The feature request : Need a 3DES license

 The 3DES license is free , you will get a HEX code as the 3DES licnense.
  
 Let me know if you have any queries.
 


 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74644&t=73769
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html