cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
631
Views
0
Helpful
4
Replies

site to site vpn help

peterhkim
Level 1
Level 1

I'm trying to build site to site vpn using two 5520s. Two ASAs are sitting behind edge Cisco routers. To allow ASAs have site to site VPN, what port do I have to allow on the router to pass VPN traffic? I have to allow remote FW IP to connect to local FW IP. Port 50,51 and 500?

Thanks.

1 Accepted Solution

Accepted Solutions
4 Replies 4

5220
Level 4
Level 4

Yes, you got them all: IP ports 50 and 51 and UDP port 500. Also leave the ICMP ports opened between the IPs for the PathMTU Dicovery.

Please rate if this helped.

Regards,

Daniel

Careful not to get mixed up by ports 50 and 51 and ip protocols 50 and 51. You need ip protocol 50(esp) and udp port 500.

So, I need access-list setup on the router to allow udp port 500 and ip protocol 50.

Did I get this right?

Thanks.

Yes.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: