Site to Site VPN access List

[ThomasMull9000]

Hello Guys

i created site to site vpn connection its working fine and its perfect.

here is my scnerio

Site A

Public - 155.155.155.20

private - 192.168.1.2 /24

SITE B

public 155.155.155.10

private 192.168.2.2 /24

So now i am in a site A , so site B can access to site B private address 192.168.1.2 , he can ping , telnet , ftp every thing

so  i want that he can one use SMPP service and deny all other service form Site B

how i can do that please

[cadet alain]

Hi,

I suppose you configured the L2L VPN using crypto map so in this case all you have to do is modify your crypto ACL to just permit the service you want to use on site B from site A.

Regards.

Alain

[ajay chauhan]

You can block access on by putting simple ACL on inside interface on Site B. Once packet is denied on inside ACL will not be processed by crypto.

Thanks

Ajay