VPN Client

[w_basheer]

Hi;

i need to let one of my internal clients to establish a VPN tunnel to outside using cisco VPN client.

my clients reside behind a PIX firewall.

what should i do?

what ports and acccess list needed to be configured ?

Thanks

[wharrison2000]

Hi,

The 7.21 image has an inspect for IPSEC-pass through. So an upgrade may handle it. Understand the some firewalls close down UDP port 500 which is where IKE negotiates.

HTH

Bill

[w_basheer]

Hi;

Thanks

my pix IOS version is 6.3

should my access list just open port 500? for IKE ?

Thanks

[r-frank]

You will need the following

access-list inside permit esp

access-list inside permit udp eq 500

otherwise you will only get half the problems solved.

Watch out for your NAT'ing here too.