another cisco pix 520 question

Discussion in 'Cisco' started by Scott Emick, Jul 16, 2004.

  1. Scott Emick

    Scott Emick Guest

    Can the 520 (ISO 5.1) be configured to allow windows (MS) vpn client access?
    not using the cisco secure vpn client?

    Scott Emick
     
    Scott Emick, Jul 16, 2004
    #1
    1. Advertisements

  2. :Can the 520 (ISO 5.1) be configured to allow windows (MS) vpn client access?
    :not using the cisco secure vpn client?

    Do you mean "configured to pass through Windows client access to another
    machine", or do you mean "configured so that the PIX terminates the
    IPSec tunnel for outside Windows machines?"

    If you mean terminates the tunnel, then see
    http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v51/config/commands.htm#xtocid82

    If you mean "passes through" then you should be able to do it using
    identity-NAT or an IP address range in your 'global' command
    [for outgoing connections] or using individual statics
    (incoming connections.) PIX 5.1 cannot, though, pass Windows VPNs
    (such as PPTP) through PAT (port address translation.) Even PIX 6.3(3)
    has a hard time with that.
     
    Walter Roberson, Jul 16, 2004
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.