Hi

I have a PIX with 6.1(1) installed and am using VPN Client 3.5.1

Setup:


    --------
    |Client|
    --------
       |
       |
    -------
    |PIX  |
    -------
       |
       |
  ~~~~~~~~~~~
   INTERNET
  ~~~~~~~~~~~
       |
       |
    -------
    |PIX  |
    -------

The upper PIX ( where the client is behind) is doing NAT.

What do I have to configure on the lower (the Headquarter) Pix to allow
IPSec over TCP (Port 10000)???
What Ports must I have open on the upper Pix, I'd assume:
access-list 101 permit udp any eq isakmp host <Pix Firewall> eq isakmp
access-list 101 permit esp any host <Pix Firewall> 
access-list 101 permit ahp any host <Pix Firewall> 

Any help is appreciated, thank you very much in advance.




--
Mit freundlichen Gruessen
With Kind Regards

Andre 


_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to