VPN problem over TCP 10000

jms112080 · ‎02-14-2007

I have a user that needs to VPN out to another network over TCP 10000. My ASA is running 7.2, and is permitting the connection outbound. I see the traffic go through the inside, it is natted, everything seems to work fine. The return traffic never makes it back to the user. I see it get to the outside interface, but it never makes it to the inside interface. Any ideas?

Kamal Malhotra · ‎02-14-2007

Hi,

Please make sure that the access-list bound with your outside interface has the traffic from any to the NATed IP permitted on TCP 10000.

HTH,

Kamal

jms112080 · ‎02-14-2007

Why would that not be permitted already, since the connection is initiated from the inside?

Kamal Malhotra · ‎02-14-2007

Hi,

We are permitting it for the return traffic. Please try it first then we can discuss.

Regards,

Kamal