Site-to-site VPN won't work with very specific ACLs

jasonww04 · ‎06-22-2009

Can anyone explain why I have no problems with a VPN using this ACL:

permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.0.255

but this one:

permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.7.255 doesn't work?

I am only narrowing down the number of networks on the 10.11. side.

Collin Clark · ‎06-22-2009

Double check that your ACL's match on each side.

jasonww04 · ‎07-02-2009

Part of the problem is that one endpoint is Microsoft ISA which has very limited VPN abilities. It won't let me match ACLs exactly.