Re: Quick Hardware VPN Connection

I have a few VPNs where the remote side is using Cisco gear. A vpn
concentrator that I don't know the model #, and a Pix ?? In each case, I was
told we needed static IPs which we had. These are application vendors that
require a VPN to support their apps.

On the only Pix that I manage, the customer wanted to setup a vpn to a
remote office that had a dynamic IP. I could not get it to work, so I called
the local Cisco guys and they couldn't get it to work either, but said it
required static on both sides. So my comments are only based on my limited
experience with Cisco VPN hardware.

Buddy G.

I myself, manage only one Cisco router - a Pix 506 I think.
"DaveD" <decdav@xxxxxxxxxxxxxxx> wrote in message
news:hfkpd2dn58ekk70m19sk2te38v2d1nmlhs@xxxxxxxxxx
Cisco VPNs require static IPs on one end only, at least the 1700 and
1800 series can. I'm not the network person (that's outsourced) but
Cisco helped them configure the routers. They do have a doucment
someplace that explains how to do it. The non-static router has to
keep the link alive.

Dave

On Fri, 11 Aug 2006 03:43:51 -0700, "Buddy Greenshield"
<gcsbend-at-bendcable-dot-com> wrote:

Cisco vpns require static ips at both ends, others such as the Linksys, do
not.

Buddy G.

"Simon" <simon@xxxxxxxxxxxx> wrote in message
news:xKHCg.13018$t%.4499@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Static at one end only is fine as long as the dynamic end makes the
connection or keeps it alive, using a dynamic dns service you can get
away
with dynamic both ends, stability obviously depends on the frequency of
the address changes.
simon

pete wrote:
As I understand it with my Cisco VPN router, both connections require
static ip addresses.
It would be great if there is a solution.

I can log in through a static ip address but not a though a non-static
ip
address.

Ie: with a freedom2surf broardband connection I can, but with NTL, I
can't. (both UK)




"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:uNoZS4HvGHA.3552@xxxxxxxxxxxxxxxxxxxxxxx
I think you left a router out of your diagram, is SBS connected direct
to the cable modem or is there a router between? (sounds like there is
from your description)

If so, the VPN tunnel is being terminated on the SBS External network.

Are you trying PPTP or IPSec?

<bkbgc1@xxxxxxxxx> wrote in message
news:1155214862.894048.190180@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
So this is what I thought a hardware VPN Would look like (I am better
at diagrams then writing):

Remote Location PCs
||
VPN Router
||
Cable Modem
||
INTERNET
||
Cable Modem
||
SBS2003 (Main office) (2 NICs)
||
Dell Switch
||
Main Office PCs

But from what I have read it doesn't work this way. I am trying to
connect my computer at a remote office to the SBS with full
functionality. Right now I am using software VPN and it isn't cutting
it. I have 2 Linksys BEFVP41 v2 VPN Modems. Can someone show me the
real way these devices should be setup to reach full domain
functionality?











.

Relevant Pages

  • Re: VPN Assistance
    ... This will expose port 1723 on th Pix to only these ... Glad it's working - now try to convince the client that using the Cisco ... client is more secure than using PPTP. ... IPSec VPN ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Assistance
    ... Yes, with 2 NIC's, you are not going to be able to use the Cisco IPSec VPN ... Unless of course you can pull a NIC out and use the Pix on it's own ... The commands you need for the Pix to allow PPTP passthrough are: ...
    (microsoft.public.windows.server.sbs)
  • RE: Firewall Hardware Recommendations
    ... but Cisco makes for good medicine also. ... next time I setup a PIX I'll have to load it on up and give it a shot. ... WatchGuard has you pay for VPN lic's. ...
    (Security-Basics)
  • Re: VPN and third party appliances
    ... remote access VPN with a Cisco PIX as the VPN Server. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Assistance
    ... Glad it's working - now try to convince the client that using the Cisco VPN ... You'll need to use the SBS box as a PPTP server in this ... Unless of course you can pull a NIC out and use the Pix on it's own ...
    (microsoft.public.windows.server.sbs)