ACL on WLAN

[b-ulrich1]

      Helllo,

I have a ACL applied on a WLAN on a 2125 controller.  I cannot get the older Cisco IPSec (Version 5.0.05.0290) client to work through the ACL and through the WLAN onto it's destination.  When the Cisco IPSec client is on another unrestricted WLAN, it works.  I have allowed TCP/UDP 500, 4500, TCP 10000 both directions and it fails.  I can see the denys counters incrementing but cannot figure out what is being blocked.  Any ideas?              

[Saravanan Lakshmanan]

it doesn't mention VPN pass through support on unsupported list for 2100.

Try, WLAN> security> Layer3> L3 security select vpn pass through option, if available. If the option NA then ACL should work for pass through.

http://www.cisco.com/en/US/products/ps6366/products_qanda_item09186a00808b4c61.shtml

vpn pass through certainly not supported on 2500 and 5500 baed platform, however it can be achieved through ACL.