ASA remote access VPN termination question

[yong khang NG]

Hi all

How to setup the ASA Remote Access VPN whereby the topology:  Internet <--> Border Router <--> ASA <--> Private LAN

01. Border router facing internet, Dynamic PAT configured on it

02. Border router then static route to ASA. It is using RFC 1918 IP address, /30 subnet

What should i do over the router and ASA firewall in order to have ASA remote access VPN ?

Thanks

Noel

[Karsten Iwen]

On the border router you have to configure access-control and port-forwarding. It depends on the VPN-style what you need:

• SSL-VPN: tcp/443, udp/443
• IPsec: udp/500, udp/4500, tcp/443