Remote Access And Site To Site VPN

Discussion in 'Cisco' started by steviebee_uk, Nov 15, 2006.

  1. steviebee_uk


    Oct 26, 2006
    Likes Received:
    Can someone help please - I have successfuly configured a Site-To-Site VPN between 2 sites however when I try and add a Remote access VPN onto the same PIX it brings down the Site to Site vpn. I am not great with VPN' s and created the Site-To-Site and remote access VPN's with the wizard.

    Config below.

    PIX Version 6.3(1)
    interface ethernet0 auto
    interface ethernet1 auto
    interface ethernet2 auto
    interface ethernet3 100full
    interface ethernet4 auto
    interface ethernet5 auto
    nameif ethernet0 outside security0
    nameif ethernet1 inside security100
    nameif ethernet2 intf2 security60
    nameif ethernet3 intf3 security5
    nameif ethernet4 intf4 security80
    nameif ethernet5 interconnect security10
    enable password xb9n6y9ZRqJ3/fXv encrypted
    passwd xb9n6y9ZRqJ3/fXv encrypted
    hostname DirectDPIX
    fixup protocol ftp 21
    fixup protocol h323 h225 1720
    fixup protocol h323 ras 1718-1719
    fixup protocol http 80
    fixup protocol ils 389
    fixup protocol rsh 514
    fixup protocol rtsp 554
    fixup protocol sip 5060
    fixup protocol sip udp 5060
    fixup protocol skinny 2000
    no fixup protocol smtp 25
    fixup protocol sqlnet 1521
    name DDDearne
    access-list inside_outbound_nat0_acl permit ip DDDearne
    access-list inside_outbound_nat0_acl permit ip
    access-list intf2_cryptomap_20 permit ip DDDearne
    access-list intf2_cryptomap_dyn_20 permit ip any
    pager lines 24
    logging monitor debugging
    logging buffered debugging
    mtu outside 1500
    mtu inside 1500
    mtu intf2 1500
    mtu intf3 1500
    mtu intf4 1500
    mtu interconnect 1500
    ip address outside x.x.x.x
    ip address inside
    ip address intf2
    no ip address intf3
    no ip address intf4
    ip address interconnect
    ip audit info action alarm
    ip audit attack action alarm
    ip local pool DDRemotePool
    failover timeout 0:00:00
    failover poll 15
    failover ip address outside x.x.x.x
    failover ip address inside
    no failover ip address intf2
    no failover ip address intf3
    no failover ip address intf4
    failover ip address interconnect
    failover link interconnect
    pdm location inside
    pdm location inside
    pdm location DDDearne outside
    pdm location DDDearne intf2
    pdm location intf2
    pdm history enable
    arp timeout 14400
    global (outside) 1
    nat (inside) 0 access-list inside_outbound_nat0_acl
    nat (inside) 1 0 0
    route outside 1
    route intf2 1
    route inside 1
    timeout xlate 3:00:00
    timeout conn 24:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
    timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
    timeout uauth 0:05:00 absolute
    aaa-server TACACS+ protocol tacacs+
    aaa-server RADIUS protocol radius
    aaa-server LOCAL protocol local
    aaa-server partnerauth protocol radius
    http server enable
    http inside
    no snmp-server location
    no snmp-server contact
    snmp-server community public
    no snmp-server enable traps
    floodguard enable
    sysopt connection permit-ipsec
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto dynamic-map intf2_dyn_map 20 match address intf2_cryptomap_dyn_20
    crypto dynamic-map intf2_dyn_map 20 set transform-set ESP-3DES-SHA
    crypto map intf2_map 20 ipsec-isakmp
    crypto map intf2_map 20 match address intf2_cryptomap_20
    crypto map intf2_map 20 set peer
    crypto map intf2_map 20 set transform-set ESP-3DES-SHA
    crypto map intf2_map 65535 ipsec-isakmp dynamic intf2_dyn_map
    crypto map intf2_map interface intf2
    isakmp enable intf2
    isakmp key ******** address netmask no-xauth no-config-mode
    isakmp policy 20 authentication pre-share
    isakmp policy 20 encryption 3des
    isakmp policy 20 hash sha
    isakmp policy 20 group 2
    isakmp policy 20 lifetime 86400
    vpngroup DDRemoteGroup address-pool DDRemotePool
    vpngroup DDRemoteGroup dns-server
    vpngroup DDRemoteGroup idle-time 1800
    vpngroup DDRemoteGroup password ********
    telnet inside
    telnet inside
    telnet timeout 60
    ssh timeout 5
    console timeout 0
    terminal width 80


    Last edited: Nov 15, 2006
    steviebee_uk, Nov 15, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.