Solved: L2L VPN over TCP

praveenprakash · ‎09-08-2006

Hi,

Can anyone please tell me if it is possible to setup a L2L tunnel over TCP between two PIX 515E firewalls?

Praveen

ajagadee · ‎09-08-2006

Praveen,

Not possible for Lan to Lan IPSEC Tunnels on the Pix.

You could use a feature called "Ipsec Over TCP" but this is for only for VPN Clients.

If you dont mind, could you share the reason for this type of requirement. Thanks!

I hope it helps.

Regards,

Arul

View solution in original post

ajagadee · ‎09-08-2006

Praveen,

Not possible for Lan to Lan IPSEC Tunnels on the Pix.

You could use a feature called "Ipsec Over TCP" but this is for only for VPN Clients.

If you dont mind, could you share the reason for this type of requirement. Thanks!

I hope it helps.

Regards,

Arul

praveenprakash · ‎09-11-2006

Arul,

Thank you very much for the reply. The reason is, we have a tunnel running to one of our client sites and due to internet conjestion and/or some routing issues between SPs there is a lot of packet loss happening and the end users are suffering with their appliations. But I assume the packet loss should be taken care by TCP Layer between the hosts.

I am not really sure if tunnel over TCP makes sense but just wanted to check.

Regards,

Praveen