ps3cheats

I took over support for a small company that has a pair of PIX 501s. The offices each have a cable broadband connection from an ISP that doesn't offer static IP addresses. The VAR that setup the PIX's assumed the cable connections had static IP addresses so the access-list commands look like:

access-list outside_access_in permit tcp any host xx.xxx.xxx.xx eq 3389

When "xx.xxx.xxx.xx " changes (has been about twice a year - not too much work but disruptive) I have to rewrite the script to reflect the new IP address of the cablemodem

I have setup dynamic IP service for the company and we are using that for SBS 2003 RWW and OWA. Is there a way to use the dynamic IP address in the PIX script for the access-list commands?

If not is there a way to name the outside IP address so I only have to change it in one place in the script?

Is it possible to use dynamic IP address for the PIX to PIX VPN?

ps3cheats

Here's a good document
http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a0080094680.shtml

Notice on one end (central pix):
isakmp key ******** address 0.0.0.0 netmask 0.0.0.0

That end will never have to change, only the remote when the central pix IP changes.