uBR905 & PIX501?

Feb 02, 2006 7 Replies

We want to install a PIX501 at a customer to do LAN to LAN tunnels with our office PIX515e, but the customer has a Cisco uBR905 and the cable company will not replace the uBR905 with a standard cable modem so we can connect the PIX501 to the cable modem - any suggestions for a workaround?



Rocky


is the cable modem in bridging mode? do you own this cable modem? i think cisco cable modems are VPN capable devices when in routing mode.

The cable company will not give us the password to the uBR905 & they refusey to assist in any way. They say just put the pix after the uBR905 on

192.168.0.x segment to do VPN tunnels. They will not >

you should have opened all ports on ubr or at least ipsec(isakmp...) after ubr you can put pix and in this scenario it should work.All your traffic is tunneled and your provider doesn't know what traffic is in the tunnel.

so if the cable provider has everything locked down, we are screwed? The only idea I can up was to put a pc in the customer computer room, run a cisco vpn client out to our office, and we can come in through that tunnel, and RDP or PCA from there around the clients network?

If the pc locks up, we would have to have the client reboot it.

Do you see any negatives vs the VPN tunnel? Its still encrypted. Rocky

Ask the cable company to reconfigure the uBR. It sounds like the uBR is configured as "routed" or "router" mode. It can be configured as a bridge instead, which would let you use the PIX.

you really need to find out then if the cable modem is in bridge mode. if it is, like someone else suggested, you can just put the pix behind it, and set it to receive dhcp (if that's how your isp operates). treat the pix behind it like any other computer/pc device in terms of how you physically connect it to the network, and assign network/ip information.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required