VPN on a through two Cisco routers?
"Ken's Work Laptop" <[email protected]> Tue, 10 Jan 2006 12:41:44 -0600
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <001801c61615$82319690$c86e0705@undrlaptopxp> |
This is a multi-part message in MIME format. --===============0718322883== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0015_01C615E3.36795A80" This is a multi-part message in MIME format. ------=_NextPart_000_0015_01C615E3.36795A80 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hey everyone. I am wondering how feasible it is to run a IPSec firewall = (using two Linksys BEFVP41) through two Cisco routers, which are setup = in the following manner. Internet connection goes into the first Cisco router which is using a = private IP range of 192.1.0.x/255.255.255.0. Off of this router is = another Cisco router which is providing a network of = 192.168.1.x/255.255.255.0. My Linksys router is on this network and has = it's own network of 192.168.2.x/255.255.255.0. Now, I do not have the = model numbers on hand, but I am expecting an email shortly with those = model numbers and I will reply to the list with them once I have them, = but I need to find out if there is a better way to handle this. = Basically, the VPN is going to be used to reach a VoIP phone switch on = the 192.168.1.x network, but there are phones on the 192.1.0.x network = which are using the VoIP phone switch as well. So, is having the = LinkSys router on this network redundant or does it depend mainly on the = Cisco switches? Ken Livingston Comtex Telecommunications [email protected] ----- Original Message -----=20 From: Qian, Roger=20 To: [email protected]=20 Sent: Tuesday, January 10, 2006 9:06 AM Subject: [VPN] Need a dedicated VPN box? Hi All, We're using PIX 515UR box as firewall and VPN both in our corporate = office. Remote users (laptops) VPN in corporate network through PIX = outside interface. The problem is that after VPN connected the remote = users cannot browse Internet using corporate gateway which is PIX inside = interface. Do I need a dedicated VPN box? Which box you recommend? = Please advice. =20 The VPN configuration in PIX is PPTP and we have about 10 remote = users. =20 Thanks a lot. =20 Roger -------------------------------------------------------------------------= ----- _______________________________________________ VPN mailing list [email protected] http://lists.shmoo.com/mailman/listinfo/vpn ------=_NextPart_000_0015_01C615E3.36795A80 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML xmlns=3D"http://www.w3.org/TR/REC-html40" xmlns:o =3D=20 "urn:schemas-microsoft-com:office:office" xmlns:w =3D=20 "urn:schemas-microsoft-com:office:word"><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2900.2802" name=3DGENERATOR> <STYLE>@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in = 1.25in; } P.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman" } LI.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman" } DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman" } A:link { COLOR: blue; TEXT-DECORATION: underline } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline } A:visited { COLOR: purple; TEXT-DECORATION: underline } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline } SPAN.EmailStyle17 { COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose } DIV.Section1 { page: Section1 } </STYLE> </HEAD> <BODY lang=3DEN-US vLink=3Dpurple link=3Dblue bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>Hey everyone. I am wondering how = feasible it=20 is to run a IPSec firewall (using two Linksys BEFVP41) through two Cisco = routers, which are setup in the following manner.</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Internet connection goes into the first = Cisco=20 router which is using a private IP range of = 192.1.0.x/255.255.255.0. Off=20 of this router is another Cisco router which is providing a network of=20 192.168.1.x/255.255.255.0. My Linksys router is on this network = and has=20 it's own network of 192.168.2.x/255.255.255.0. Now, I do not have = the=20 model numbers on hand, but I am expecting an email shortly with those = model=20 numbers and I will reply to the list with them once I have them, but I = need to=20 find out if there is a better way to handle this. Basically, the = VPN is=20 going to be used to reach a VoIP phone switch on the 192.168.1.x = network, but=20 there are phones on the 192.1.0.x network which are using the VoIP phone = switch=20 as well. So, is having the LinkSys router on this network = redundant or=20 does it depend mainly on the Cisco switches?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Ken Livingston</FONT></DIV> <DIV><FONT face=3DArial size=3D2>Comtex Telecommunications</FONT></DIV> <DIV><FONT face=3DArial size=3D2><A=20 href=3D"mailto:[email protected]">[email protected]</A></FONT></D= IV> <BLOCKQUOTE=20 style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; = BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"> <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV> <DIV=20 style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: = black"><B>From:</B>=20 <A [email protected] = href=3D"mailto:[email protected]">Qian,=20 Roger</A> </DIV> <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A = [email protected]=20 href=3D"mailto:[email protected]">[email protected]</A> </DIV> <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Tuesday, January 10, 2006 = 9:06=20 AM</DIV> <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> [VPN] Need a dedicated = VPN=20 box?</DIV> <DIV><BR></DIV> <DIV class=3DSection1> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Hi=20 All,<o:p></o:p></SPAN></FONT></P> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">We=92re using PIX 515UR = box as=20 firewall and VPN both in our corporate office. Remote users (laptops) = VPN in=20 corporate network through PIX outside interface. The problem is that = after VPN=20 connected the remote users cannot browse Internet using corporate = gateway=20 which is PIX inside interface. Do I need a dedicated VPN box? Which = box you=20 recommend? Please advice.<o:p></o:p></SPAN></FONT></P> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: = Arial"><o:p> </o:p></SPAN></FONT></P> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">The VPN configuration in = PIX is=20 PPTP and we have about 10 remote users.<o:p></o:p></SPAN></FONT></P> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: = Arial"><o:p> </o:p></SPAN></FONT></P> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Thanks a=20 lot.<o:p></o:p></SPAN></FONT></P> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: = Arial"><o:p> </o:p></SPAN></FONT></P> <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: = Arial">Roger<o:p></o:p></SPAN></FONT></P></DIV> <P> <HR> <P></P>_______________________________________________<BR>VPN mailing=20 = list<BR>[email protected]<BR>http://lists.shmoo.com/mailman/listinfo/vp= n</BLOCKQUOTE></BODY></HTML> ------=_NextPart_000_0015_01C615E3.36795A80-- --===============0718322883== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ VPN mailing list [email protected] http://lists.shmoo.com/mailman/listinfo/vpn --===============0718322883==--