Cisco Community
English
Register
COMMUNITY HELPING COMMUNITY - With your Community actions and contributions, we will donate up to $10,000 to UNICEF by end of January- PARTICIPATE
Register
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
630
Views
0
Helpful
1
Replies
Highlighted
craig.corbett
Explorer
Explorer
‎11-03-2012 05:04 AM
‎11-03-2012 05:04 AM

Locking down Site 2 Site IPsec vpn vpn-filter clarity?

Can someone please provide some clarity and explanation to the vpn-filter feature?

I have a site to site vpn, local there are 2 subnets, and remote there are 4. I need to restrict the remote subnets from accessing one of the local subnets, but I need to allow both local subnets to access all 4 remote subnets. I don’t have control over the remote ACL’s. Can I do what I need to do with the vpn-filter feature configured on the local side only?

Software Version 8.2(1) - will be upgrading soon.

Comments, hints / tips, greatly appreciated.

Thanks.

Labels:
0 Helpful
Reply
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Marcin Latosiewicz
Cisco Employee
Cisco Employee
‎11-03-2012 09:39 AM
‎11-03-2012 09:39 AM

What you need to remember is that VPN filter is applied as an access-list for all traffic from remote to your local LAN.

It is associated with particular SAs. The behavior is not fully stateful so take care of what you're doing :-)

It's all in command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/uz.html#wp1630190

View solution in original post

0 Helpful
Reply
1 REPLY 1
Highlighted
Marcin Latosiewicz
Cisco Employee
Cisco Employee
‎11-03-2012 09:39 AM
‎11-03-2012 09:39 AM

What you need to remember is that VPN filter is applied as an access-list for all traffic from remote to your local LAN.

It is associated with particular SAs. The behavior is not fully stateful so take care of what you're doing :-)

It's all in command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/uz.html#wp1630190

View solution in original post

0 Helpful
Reply
Latest Contents
Get the 2021 Cisco Security Outcomes Study
Created by Kelli Glass on 12-01-2020 11:44 AM
0
0
0
0
Usually no news means good news in security, but how do you know what is working, what could be better and where you should invest? Introducing the Cisco Security Outcomes Study. We commissioned an independent survey of 4,800 active security a... view more
What's New in NGFW FTD 6.7, ASA 9.15.1, FXOS 2.9
Created by suhegade on 11-30-2020 02:52 AM
0
5
0
5
Cisco is happy to announce their Fall release, FTD 6.7/ASA 9.15.1/FXOS 2.9, which consists of 104 features across 24 initiatives, addressing technical debt while staying true to our five core investment areas: Ease of Use and Deployment, Unified Policy an... view more
Cyber Ops Pro 350-201 CBRCOR
Created by Gallifrean on 11-25-2020 02:44 PM
1
0
1
0
Does anyone know when and where study resources will become available for this certification?
Is it right way to exclude ? \Program Files\Commvault\*
Created by Pruthvirajnasagoni89418 on 11-24-2020 09:34 AM
0
0
0
0
Hi Team, I have one exclusion provided by internal team which is Is it right way to exclude ?  *\Program Files\XYZ\* , as per Cisco Docs i see its not recommended because it will create performance issue when we use * at starting ,  So... view more
Customer Connection Briefing - Central Log Management using ...
Created by Kelsy Tibshraeny on 11-24-2020 09:27 AM
0
0
0
0
Central Log Management using Cisco Security Analytics and Logging, December 2nd at 8am-9:30am PT Cisco Security Analytics and Logging is Cisco’s Central Log Management solution for Network Operations and Security Outcomes. It is delivered both as a c... view more
Content for Community-Ad
Cisco Community October 2020 Spotlight Award Winners

Follow our Social Media Channels