Site to Site VPN

What application is losing connectivity? If it's a connection based app you can try changing the tcp timeout values on both pixes. I don't know where that is in pdm, but it's pretty obvious where it is if you look at the config.

Ted

Hi,

They are using two apps - Outlook and a terminal emulator connected to a unix box.

Only the terminal emulator is visibly kicking users out as they use it all the time. Outlook is hardly used which is why it's not noticed but i'm guessing that's kicking users also.

I'll check out the timout values

Thanks!

Hi Guys,

Can I do the following.

PIX A resides inside the DMZ of PIX B. Can I establish a VPN between PIX A and PIX C. PIX A and C are seperated by the Internet.

Yes , basically you need to make PIX A visible on the internet by translating its outside address in PIX B and allow ISAKMP - IPSEC traffic to it.

2- On PIX B outside access-group, permit esp (proto 50) from PIX C IP to PIX A translated address On PIX B outside access-group, permit ah (proto 51) from PIX C IP to PIX A translated address On PIX B outside access-group, permit isakmp (udp 500) from PIX C IP to PIX A translated address