Cisco PIX VPN Connect from N900
 

Hello everyone,

I am trying to figure out if the N900 properly supports any of the VPNs available on the Cisco PIX 501 firewall? This is an older device, produced starting around 2001 and end-of-lifed around 2007.

Update: Vpnc connects great with the Cisco PIX line of devices (IOS 6.3 and prior)!

The only problem is for some reason the VPN connection drops after an undetermined amount of time... this does not happen with the Cisco native client... I am still investigating why this occurs, but the core functionality works!

Re: Cisco PIX VPN Connect from N900
 

wish i knew what model cisco we use at work, i know its a good 4/5 years old, and works :D

Re: Cisco PIX VPN Connect from N900
 

I would say that vpnc (and vpnc-gui) will work with the PIX 501... it's from the same era as the Cisco 3000 VPN concentrators (and those got EOL'ed in 2008 or 2009...)

Re: Cisco PIX VPN Connect from N900
 

I don't know the specific model but I connect to Cisco PIX VPN using vpnc. I have to use --dpd-idle=0 otherwise i get disconnected after a few minutes idle.

Re: Cisco PIX VPN Connect from N900
 

Update: Vpnc connects great with the Cisco PIX line of devices (IOS 6.3 and prior)!

The only problem is for some reason the VPN connection drops after an undetermined amount of time... this does not happen with the Cisco native client... I am still investigating why this occurs, but the core functionality works!

Re: Cisco PIX VPN Connect from N900
 

Anyone know anything about "Clean Access Agent"? My works use sthis on teh laptop to 'log in" and I'm not sure what I can use to replicate this

Re: Cisco PIX VPN Connect from N900
 

I have not heard of this "Clean Access Agent", what does it do, and how is it different from regular Cisco VPN client agent?

Re: Cisco PIX VPN Connect from N900
 

To prevent the disconnects add --dpd-idle=0 to your vpnc commandline. That disables dead peer detection & leaves you connected indefinitely.

Re: Cisco PIX VPN Connect from N900
 

Thank you for the info. In order to make this useful we would need to edit the VPNC GUI program to change the string.

Does anyone know where in the filesystem the VPNC GUI program is? I've been looking around but cannot find it (it's not in /etc/vpnc)

Thanks

Re: Cisco PIX VPN Connect from N900
 

I don't use the vpnc gui but you should be able to type "dpkg -l vpnc-gui" to see which files are owned by that package.