Is possible to limit tcp or udp traffic between a site-to-site VPN connect?

[rselmi]

Is possible to limit tcp or udp traffic between a site-to-site VPN connection

[kagodfrey]

Hi

If you mean is it possible to control which tcp or udp ports are allowable through a site to site VPN tunnel, then yes, this is possible.

For instance,a crypto map statement such as "crypto map vpntunnel 10 match address aclvpn" coupled with access-list statements such as "access-list aclvpn permit tcp sourceip sourcemask destinationip destinationmask eq 80" would permit http traffic through the vpn tunnel.

HTH

Kev

[rselmi]

Thanks, I will apply these configurations to the PIX.