Site to site tunnel traffic with source port

[Sumit Khurana]

Hi,

I have setup a site to site tunnel in ASA 5505 with external vendor for one of our DMZ server, have restricted inbound / outbound access on port 22 only through a group policy. 

All works when server tries to communicate with external server with source manually defining port 22 as source and destination port 22. with random source port communication get denied.

Can someone please help if they seen the similar issue before or I missed any config in ASA?

Thanks

[ashok_boin]

Hi Sumit,

Looks like you have only allowed the traffic to/from 22 as per your mail.

Can you please check the following if you miss anything?

http://www.cisco.com/c/en/us/support/docs/cloud-systems-management/configuration-professional/112153-ccp-vpn-asa-router-config-00.html

Ashok.