Remote Management of Bridged Cisco 837

Aug 18, 2006 1 Replies

Hello all, I have a client who has a business DSL connection and has purchased a Cisco 837 and Pix 506e firewall. Currently I'm planning to setup the firewall to use PPPoE via the bridged 837 router. So network looks like this :-



LAN PIX ADSL 837 ISP



The reason why I'm using bridge mode is to allow VPN to terminate on the Cisco PIX which requires a public IP. The client has only been assigned 1 IP address for the ADSL connection. I understand that in order to manage the 837 in bridged mode I need to assign an IP address on the BVI interface on the 837. I would assume that this IP address needs to be on the same subnet as the external interface of the PIX firewall. If that is the case then obviously I would need to have another public IP address in the subnet as the one already given to my IP - is this correct? Could I not use a private IP address and assign one to the PIX as well - not sure if that's possible. Has anyone been involved in this type of setup? Please advise, thanks.



Regards, Hugoti



Why don't you set the 837 as a router and forward all the VPN protocols, ports and so on to the PIX? You could just forward udp-tcp ports from 1-60000 and all protocols like gre, esp, etc etc to the PIX and choose higher ports, say 60022 and 60443, to manage the router by remote.

That's my opinion. I think it is waste of money to buy a 837 and make it acting like a modem. Just buy a 20 euros modem from any brand and connect it to the PIX. Moreover you can discharge the PIX load using the 837 as a router.

Alex.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required