|
Posted by Walter Roberson on April 29, 2005, 5:31 am
If you were Registered and logged in, you could reply and use other advanced thread options
:I have a client that is using SonicWall with dynamic public IP address
:assigned to their DSL.
:They want to establish a VPN tunnel a PIX Firewall in one of their remote
:sites using static IP addresses.
:Is that possible?
:Something like a VPN client (SonicWall) to a VPN server (PIX) relationship
:but it will establish a site-to-site VPN tunnel?
It should work. On the PIX, set up a crypto dynamic map
with the transform set, and import that into your crypto map
with a high policy number. If you are using preshared keys,
set up an isakmp key on the PIX; if you know the range of IP addresses
that might be assigned, you can use the appropriate netmask; otherwise
you'll have to use the 0.0.0.0 0.0.0.0 address on the isakmp key.
--
Are we *there* yet??
|