topic How 2 allow Port Range Access via Site-to-Site VPN in Network Security

How 2 allow Port Range Access via Site-to-Site VPN

tkamish22 — Mon, 11 Mar 2019 23:51:08 GMT

I have 2 sites that are connected via a Site-to-Site VPN Tunnel. And need to allow a Port Range from a core server at site one to site two.

Site one:

192.168.1.0/24

Core Server Address that needs the access:

192.168.1.150

Ports:

6000-6050

Rule that I added:

access-list inside_access_in line 3 extended permit tcp host 192.168.1.150 192.168.9.0 255.255.255.0 range 6000 6050

Site two:

192.168.9.0/24

Rule that I added:

access-list inside_access_in line 3 extended permit tcp host 192.168.9.0 255.255.255.0 192.168.1.150 range 6000 6050

I could not get this to work. Any help is greatly appreciated!!!

I also tested with the above rules on the outside interface.

tkamish22 — Fri, 07 Sep 2012 02:46:56 GMT

Running 8.4(4)

Julio Carvajal — Fri, 07 Sep 2012 04:11:57 GMT

Hello Sr,

Is the traffic allow on the crypto ACL?

Can we see the configuration of both sites to resolve this faster

Remember to rate all the answers, that is as important as a thanks for us

Julio

tkamish22 — Fri, 07 Sep 2012 14:15:02 GMT

I didn't even think to put the rules in the crypto map ACL...I was placing them in the regular ACL.

I will add the rules to the crypto_map and update the thread.

Thanks!!

Javier Portuguez — Fri, 07 Sep 2012 15:32:18 GMT

Hi,

In order to allow certain ports across a VPN tunnel please check this out:

Let me know if you have any questions.

Portu.

Please rate any posts you find useful.

Julio Carvajal — Fri, 07 Sep 2012 16:32:20 GMT

Hello,

That is why, let me know as soon as you set that up.

Remember to rate all of the answers, that is as important as a thanks.

Regards,

Julio