what tcp ports for NAT with vpn lan to lan

[bma]

Hi

We build a vpn lan to lan tunnel to EDI vendor checkpoint box from cisco 3005. We use NAT address with private network setup in the cisco 3005.Tunnel is up and ftp is fine. But when put a filter in the Lan to Lan(open tcp port 20 and 21 for ftp), ftp is not work. I asked vendor, for checkpoint box, need to setup fix-up ftp, and open port 20 and 21 and running fine. How to setup fix-up ftp in the 3005? or

what is ports for the fix-up ftp?

Thanks

ben

[vkapoor5]

Try this:

Go to Configuration | Policy Management | Traffic Management | NAT | Interface Rules | Modify and Enable FTP proxy.