I've already posted this in the CCNA forum but didn't get a response, can anyone give me some useful advice?

Hi,

I've got two remote sites which I need to provide broadband internet access to, and provide one way VPN connectivity to our Head Office, the VPN tunnels will be terminated at at Cisco PIX 515R.

Previously when setting up stuff like this myself I've stuck to basic routers/firewalls etc. from companies such as Netgear and Eicon and left the setup of Cisco kit to our regular IT firm.

I had been about to purchase some Netgear kit again to do the above when I realised I could get a Cisco 827H with IP firewall feature pack for not too much more - and I'd obviously prefer the Cisco kit - however if I do purchase these I'll need to configure them myself which after reading the doc's on the Cisco site is starting to look a little daunting . And if I can't set the routers up I don't have the budget to get them configured (plus I'd really like to do it myself )

Does anyone have any tips or links or docs for setting up the above which would set my mind at rest?

Report this post to a moderator

read the csvpn text, then design a solution.

__________________
http://www.cisco.com/univercd/

Report this post to a moderator

This is the text to which Darthfeces is referring.

http://www.ciscopress.com/catalog/product.asp?st={78DE136E-5AFE-41A8-8BD4-F827DC665790}&session_id={5282F705-6C47-427A-ABAD-2C9D7AF9B7F1}&product_id={24BEDE91-777B-467F-BB06-48F873B06EC7}

What you're proposing is not a simple solution unless you're very comfortable with IPSec, the Pix OS and IOS. If you've got the time to read this text, understand it and then play with the configurations until you get it right then go for it. Otherwise you'll probably want someone to come in, design a scalable VPN solution and then at least start the implementation with the idea that you could finish it.

My $0.02

MadChef

Report this post to a moderator

Thanks for your feedback.

The VPN solution as far as the main PIX and the largest of my remote sites will be configured and installed for me, I "only" have to do the remote end at two of my smaller sites.

I'll check out those texts

Report this post to a moderator

check those document atleast for theories so you know what needs to be configure. I believe the 800 are supported by configmaker, (search cisco for configmaker to download). this should help you configure them without indepth knowledge of ios.

without having to deal with the pix at central site, this should be an easy task, get the config info from central pix admin and hten plug it in.

Report this post to a moderator