Cisco PIX and multiple VPN

Sep 27, 2005 2 Replies

Rate this thread:

aslom 20 years ago

Hi Guys,

My company needs to implements multiple VPN channels. We have Cisco PIX-515. We hanve configured 2 VPN channels but both are ended also on PIX firewals appliances. The new need may address even up to 100 VPN connection.

My first doubt - is it possible to configure PIX to support so much VPN connections without configuring each one-by-one? RADIUS server inside... some kind of Easy VPN server...?

Second doubt - is it possible to configure those VPN channels from non-Cisco-based-IOS (routers, other PIX'es) or Cisco VPN clients, for ex. small VPN routers from D-Link, Linksys, Arlotto, etc...? And authenticate them automaticaly as mentioned in my first doubt - preshared key, digital cert, RADIUS?

Thanks for any suggests, aslom

Vote

Shadus 20 years ago

On 2005-09-27, aslom blabbed:

Yes, we currently have the better part of 50 or so on a pix 515. The cpu usage is currently sitting at about 15-30%. If you were going to get into the 100 vpn range I'd suggest monitoring the traffic carefully on the 515 and perhaps going up to a 525. It would depend how heavy the traffic load is going to be. Another thing you need to look into is a failover configuration if you're getting into that many hosts and you need any serious degree of reliability.

Vote