Cisco 2500 series VPN

[gimsiong]

Hi,

does anyone know how to configure a cisco router to enable a VPN session(IPSEC?) from a Sonicwall Client VPN from Internet to pass through. I'm using a Cisco 2500 series leased-line router with IOS 11.3 with IOS firewall. What must I include in the Access-list? What must be in the ip inpsect rule?

Thank you.

Regards,

Gim Siong

[Gilles Dufour]

ipsec uses isakmp/ike to negotiate the paramaters.

This protocol (IKE) uses udp port 500 (for src and destination).

IPSEC is actually the combination of 2 thinkgs.

ESP and AH.

ESP uses the IP protocol number 50 and AH uses 51.

so your firewall should permit these ports/protocols.