Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have a cisco pix 515E 7.0(1) and a 2801 IOS 12.4(11)T (fc2). They're both configured as Easy VPN Servers with IPsec over TCP on. Cisco VPN clients will successfully initiate and establish IPsec-over-TCP sessions with both of them.The problem is wi...
Upon reading Release Notes for Cisco VPN 3000 Series Concentrator,Release 4.7; Cisco SSL VPN Client, Release 1.0, I bumped into thissentence:"When using WebVPN with NAT-T, do not set the NAT-T port to 443. Werecommend using port 80 for NAT-T, as fire...
Hi there,I am trying to limit UDP connections initiated from a higher level sec int to a lower level sec int, aka my internal users to the internet.I'm using static mapping as so:static (inside,outside) x.24.110.26 192.168.1.110 netmask 255.255.255.2...
I have a Cisco2801, two serials configured as a frame-relay switch.On serial 0/2/0, there's an 805 attached with a back-to-back cable.On serial 0/2/1 there's a 2612 also with a back-to-back cable.The 2612 circuit comes up fine.On the 805 however, I g...
Hi Jeff,Thanks for the insight, but how about the fact that NAT-T occurs over a fixed port (UDP 4500)? I see no place to change it on a VPN Concentrator or even a PIX. Maybe they meant the "proprietary" IPsec over UDP when mentioning NAT-T?BTW, sorry...
I do have a traffic shaper in place. A great product named AstroFlow. I don't need content filtering but proper connection management for TCP and UDP.Even though P2P is shaped, there are hundreds of UDP "connections" per user and that's what I am try...
Hello Mike,My goal is to limit the number of UDP threads for each one of my inside users. Since the only way to limit the number of simultaneous connections on the PIX is through the static command, I have created static mappings for each one of my u...