Geeks: Setting Cisco PIX 501 to allow VPN?

[SlowToady]

I need to allow a PIX 501 running 6.3 to allow incoming VPN connections; it was previously allowed to do so, but without thinking I issued the "clear" command to the vpdn group while sorting the DSL problems. I need to re-enable VPN connectivity. Would I just have to setup the group, user name, and password for the VPN again? As,

vpdn group GROUPNAME username
vpdn USERNAME username PASSWORD password

Or do I have to re-do other parts of it as well?

[SlowToady]

If it would help, I could make available a copy of the config, with sensitive information edited out.

TIA

[many944s]

Go ahead and PM me with your config. minus passwords, etc.

I'll re-work it and get it back to you.

-Nick

P.S.> Individual access, site to site?
You will still need to add the IP addresses to "allow" connection from, but I will put in *edits* where you need to put them.

[SlowToady]

Nich, YGPM. 3 of them in fact:-P

[mikester]

replied; check you email.

-Mike

[SlowToady]

Thanks guys, it's working.

Boss is happy, and I'm happy in return.

Thanks!

[masraum]

Glad to see that you are up and running again so quickly. When I first transitioned from router guy to PIX guy years ago I issues something like "clear ip route" in a pix. In a router that wouldn't be a problem, but in a PIX it can be ugly since it removes all of the route commands from the config. That's a mistake that you don't make twice. ouch.

Cool to see that there are so many other networkers around. I'm a cisco guy too. I used to work with PIX, 3000 series VPN concentrators and even the IDS appliances exclusively, but it's been a while. I only get to tinker in out PIX at work occasionally. Maybe one of these days I'll be able to get back into security some more. For now it's pretty much all VoIP and MPLS.