This sounds like it is working as planned. The default for the filter looks like below.
3 #DEFAULT: VPN: Allow access to IKE from mobile clients.
Accept information ANY UDP
from ANY_IP 500
to ANY_IP 500
This usually the filter works. However, there are a few time you may wish to remove the source port. For instance, if the mobile client is behind a NAT device that is performing PAT (port address translation). If the port is translated then the filter will not match if you are filtering on source ports.
Try it both ways and see if it works.
David
At 05:03 PM 1/29/2003 -0600, Reasoner, Bob (PHES) wrote:
Has anyone else noticed that if you default the Remote Access Filters in version GB-Flash Version: 3.3.2s you mess up the VPN IKE Mobile Filter? The source ports changes to 500 which is the destination port.I would like to see that fixed in a future revision as it is a pain in the posterior to have to remember to set that back after Tech support has you reset the filters (or whatever reason you may default them). Anyone else notice that particular issue? Bob Reasoner ([EMAIL PROTECTED]) Harris County Public Health & Environmental Services --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected]
David Brooks Email: [EMAIL PROTECTED]
Tech Support Tel: +1.407.482.6925
Global Technology Associates, Inc. Fax: +1.407.380.6080
3505 Lake Lynda Drive Web: http://www.gta.com
Suite 109 http://www.gnatbox.com
Orlando, Florida 32817 ftp://ftp.gnatbox.com
USA
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
http://www.mail-archive.com/[email protected]
