topic Re: firewall IOS + easy VPN in Network Security

firewall IOS + easy VPN

mohammady — Mon, 11 Mar 2019 11:48:03 GMT

I have a cisco router with firewall IOS and internet connection,on the outside interface there is an access-list that deny anything from outside and on the inside interface there are an inspection rules..I would like to configure easy VPN client so that users can connect remotely..do this configuration cause a problem for a remote user to connect to internal network.

Re: firewall IOS + easy VPN

mohammady — Wed, 16 Jan 2008 16:45:36 GMT

any suggestions????

Re: firewall IOS + easy VPN

mohammady — Sat, 16 Aug 2008 14:55:07 GMT

I need your help in this issue ?? what are the ACL's needed at outside interface to enable easy VPN connection..user will be able to connect to inside network through easy vpn only ..... Regards,,,

Re: firewall IOS + easy VPN

dhananjoy chowdhury — Sat, 16 Aug 2008 18:23:28 GMT

Hi,

You should permit UDP 500 and ESP protocol on the Outside Interface inbound ACL, for EZVPN to work.

Again if the clients are using NAT-T then you have to allow , UDP 500 and UDP 4500.

If the Outside interface is S0/0 and IP is A.B.C.D, then use this

access-list 121 permit udp ANY host A.B.C.D eq 500

access-list 121 permit esp ANY host A.B.C.D

int S0/0

ip access-group 121 in

Hope this helps.