ACL Question, VPN Ports on Internet Edge Router

Unanswered Question
Feb 16th, 2007

I have cisco VPN Concentrator behind internet edge router. I have applied ACL on the internet router as below. I am able to establish VPN connectivity, but unable to access any internal resources. When I remove the ACL from the router everything works fine. Whats wrong with my ACL?

permit udp any vpnbox eq 500

permit udp any vpnbox eq 10000

permit udp any vpnbox eq 4500

permit 50 any vpnbox

permit 51 any vpnbox

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
acomiskey Fri, 02/16/2007 - 05:44

If you are doing ipsec over tcp on port 10000, change acl to tcp any vpnbox eq 10000.

Actions

This Discussion