PIX to IOS Site to site issue

[gautamzone]

Hi friends,

A strange VPN issue with PIX 7.0 though not critical.

There is a site to site VPN tunnel between PIX and a Cisco IOS router. The tunnel should come up upon initiating traffic to a host on port 22.

When we telnet on port 22 to the host defined in interesting traffic, the tunnel DOES NOT come up. But if we ssh to it, it comes up.

Is there a solution to this? Or as a workaround, should we setup our interesting traffic to only include hosts and omit ports?

Thanks a lot

Gautam

[srue]

crypto map acl's should typically just contain hosts and not ports. use standard interface acl's to control what ports they can communicate on.