General Vpn questions

[kowalm]

I have a couple of general VPN questions...

1) When the concentrator has Transparent NAT - IPsec over UDP and IPsec over TCP enabled to support both, which one takes precedence?

I believe that UDP is default on client..no?

2)If another admin logs onto the concentrator while I (an admin) am already logged on, what permissions does he have being I'm already on? Read/Write or just plain read since an admin is already logged on given that both admin accounts are allowed read/write.

[sghosh · Accepted solution]

Hi,

1) ISPEC over UDP takes precedence.

2) The second admin will have read only access.

Thanks

Sujit

[kowalm]

The answer to question 1 is incorrect.

Check: http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00800dc6fa.html#1029463

The IPSec over TCP section.

It states that TCP takes precedence over all. Nat-T takes precendence over Ipsec over UDP. so...

1st - IpSec over TCP

2nd - Nat-Traversal

3rd - Ipsec over UDP