pdm_vpntun新.pdf

PIX: Access the PDM from an Outside Interface Over a VPN Tunnel Document ID: 4719 Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify Command Summary Troubleshoot Sample Debug Output NetPro Discussion Forums − Featured Conversations Related Information Introduction This sample configuration documents how to configure a LAN−to−LAN VPN tunnel using two PIX Firewalls. PIX Device Manager (PDM) runs on the remote PIX through the outside interface on the public side and encrypts both regular network and PDM traffic. PDM is a browser−based configuration tool designed to help you set up, configure, and monitor your PIX Firewall with a GUI. You do not need extensive knowledge of the PIX Firewall command−line interface (CLI). Prerequisites Requirements This document requires a basic understanding of IPsec encryption and PDM. Ensure that all the devices used in your topology meet the requirements described in Cisco PIX Firewall Hardware Installation Guide, Version 6.3. Components Used The information in this document is based on these software and hardware versions: • Cisco PIX Firewall Software Release 6.3(1) and 6.3(3) • PIX A and PIX B are Cisco PIX Firewall 515E • PIX B uses PDM version 2.1(1) Note: PDM 3.0 does not run with PIX Firewall software versions earlier than Version 6.3. PDM Version 3.0 is a single image that supports only PIX Firewall Version 6.3. Note: Policy NAT configurations force PDM 3.0 into monitor mode. Policy NAT is supported in PDM version 4.0 and later. Note: When you are prompted for a username and password for the PIX Device Manager (PDM), the default settings require no username. If an enable password was previously configured, enter that