how to config more than one site-to-site VPN in my PIX515E

In article , Benson wrote: :I want to set up some site-to-site VPN in my PIX515E, but do not know :how to configure the VPN gateway, like this:

:PIX506E ---- PIX515E ------PIX506E :Site A Site B Site C

Are you trying to use Site B to cross-connect Site A and Site C? If so then you will need to have Site A and Site C connect to different interfaces on Site B.

:The configure of PIX515E:

:crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac

Try using sha instead of md5, for the transform set and for the isakmp policy.

:crypto map CPOffice 1000 ipsec-isakmp :crypto map CPOffice 1000 match address Traffic_To_CPOffice :crypto map CPOffice 1000 set peer CP_OFFICE_VPN :crypto map CPOffice 1000 set transform-set strong

If that is supposed to be on a different interface than the other one, then you need to apply this to an interface.

If this is to be on the same interface as the other one, you must use the same crypto map name. You can only have one active crypto map per interface.

Hi, Roberson,

Thank you very much for your help.

What should I do, except using different interface Card, for establishing two site-to-site VPN in site B ?

Benson

In article , Benson wrote: :What should I do, except using different interface Card, for :establishing two site-to-site VPN in site B ?

You did not clarify whether the two connections were independant or whether you were trying to use site B as a hub to allow site A and site C to communicate with each other.

If you are trying to use site B as a hub, then you have to use different physical or logical interfaces, or you have to have auxillary equipment, or you have to upgrade your 515E to PIX 7.0(1) (if you trust .1 releases...)