LAN-to-LAN Tunnels and Filters

[mmelbourne]

How do I apply a filter to a LAN-to-LAN connection?

Do rules need to exist for both inbound and outbound traffic? (If a rule allows host A to communicate with host B, then a similar rule is required to allow host B to communicate with host A?)

If so, does 'outbound' imply towards the remote peer, and 'inbound' towards me?

[minoc]

Yes,

You need to have ACL's on both side to allow traffic between hosts. The Pix does not allow to filter ports when using ACL's for this when using VPN tunnel.

Regards,

Carlos Roque

Telecom Manager

Office Of Management And Budget

[mmelbourne]

Apologies, I should've added the vital piece of information that I'm using a VPN Concentrator, not a PIX firewall.