How do I configure VPN passthrough with a PIX 501

Question

Hi,Sorry, newbie question...I just recently installed a PIX 501 (version 6.3(1)) in my homenetwork.Previously I was using a cheap airlink router that provided VPNpassthrough.I'm using Nortel Contivity VPN client on 1 computer, and Cisco  VPNclient on another client.On my cheap Airlink router, I could easily use my Nortel or Cisco VPNclient to connect to my company with no configuration.  These cheaprouters always advertise the ability to do VPN Passthrough.I can't get the same thing to work on PIX 501.I've read in other newgroups about NAT transversal, enabling isakmp,etc, but nothing seems to work.Do I have to actually configure any VPN settings on the PIX?  I shouldbe able to simply configure an access-list.  Do I need to configureany transform-sets or crypto map, isakmp in order to make this towork?Thanks in advance,Wallace

Walter Roberson · Accepted Answer

6.3(1) has several known security problems. There are operational problems with 6.3(2), and security problems in 6.3(3), 6.3(4), 6.3(5), and 6.3(5)112 . It would be best if you could upgrade your PIX 501 as far as possible. If you are the registered owner of the device, the upgrade is free.

You only need to configure transform sets and crypto maps and isakmp nat-traversal if you are terminating the VPN at the PIX.

Try

fixup protocol esp-ike

How do I configure VPN passthrough with a PIX 501

Join the Discussion

Didn't find your answer?