CAPWAP tunnel as interesting traffic over S2S IPSEC VPN

[ewood2624]

I'm curious, with IPSEC site-to-site VPN, does the the CAPWAP tunnel that forms for a lightweight AP as it connects to the WLC qualify as interesting traffic to keep the VPN tunnel open?

[Stephen Rodriguez]

it would if you defined ports 5246/5247 as intersting traffic.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[ewood2624]

How would you define ports on the acl instead of the IP's for Site to Site?

[ewood2624]

This is Cisco router to cisco router not router to ASA.

[Stephen Rodriguez]

ip access-list ext < acl id > udp any any range 5246 5247.....

all depends on the acl you are using.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered