[c-nsp] Pix VPN -- Hub and spoke

[Mark Kelly]

 As far as I know, you can only use one method or the other, but not
both simultaneously.
Also be aware that unless you are using PIX OS 7.0, the spokes cannot
communicate with each other via the PIX, if the tunnels both terminate
on the same PIX interface.

Mark

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Voll, Scott
Sent: 18 May 2005 16:22
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Pix VPN -- Hub and spoke

Hello all-

 

I fairly new to VPN tunnels with Pixes.  

 

I'm setting up a PIX as the Hub and two sonic wall's as spokes.  I think
I have figured out the configuration except how to setup the identity.

 

One VPN tunnel is static and one is dynamic.  

 

So I need "isakmp identity address" for the static and "isakmp identity
hostname" for the dynamic.  I don't know how to use both.  How do I
address this?

 

TIA

 

Scott

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/