Configure Cisco PIX515e PPTP VPN Clients to allow access to another network across a IPSEC Tunnel

Discussion in 'Cisco' started by ashley.lawrence, Aug 17, 2007.

  1. Hi,

    We have a site to site IPSEC tunnel between two offices both running
    on PIX 515e's version 6.3(4) and in our main site the PIX is
    configured for PPTP VPN clients to connect. All well and good. I would
    like clients connecting on the VPN to be able to route to the internal
    network in our second site across the IPSEC tunnel as well.

    Does anyone have some generic first steps or tips on how to do this or
    whether it's even worth attempting?

    Thanks for your input.

    ashley.lawrence, Aug 17, 2007
    1. Advertisements

  2. ashley.lawrence

    Captainahab Guest

    You simply can't with 6.3(4) but you could upgrade to 7.x if possible
    and then you should be able to. I have never tried that though.

    I'm 100% sure you can if you upgrade to ASA or router.

    Captainahab, Aug 17, 2007
    1. Advertisements

  3. Close, but not -exactly- right. You -can- do it with PIX 6, but
    in order for it to work, the interface that the PPTP VPN clients
    connect to must be different than the interface used to connect
    to the remote office. If you only have one interface connected
    to the outside world, then you have a problem -- unless you can
    split your IP address space at your WAN router so that different
    addresses go to different perimeter interfaces (or to different
    VLANs on the same outside interface.)
    Walter Roberson, Aug 22, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.