Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

VPN client 'behind' a PIX?

I have a PIX515E firewall and a business partner has asked us to allow a couple users on our network to access his site via the Cisco VPN client.

I've created a static NAT mapping for each of these users, but not sure what ports/protocols to open for them in order to allow the VPN to pass through our PIX properly.

Can anyone provide me with this info or point me to a config document?

Thanks!

4 REPLIES
Silver

Re: VPN client 'behind' a PIX?

Hi,

UDP/500 and esp needs to be opened.

Please check your required document here

http://www.cisco.com/en/US/partner/tech/tk583/tk372/tech_configuration_examples_list.html

Thanks

Nadeem

Community Member

Re: VPN client 'behind' a PIX?

Nadeem,

I can't access the link you've posted. I am logged in (else I couldn't post this), but when I click it I am taken to the "Authentication Required/Forgotten Password" page. From there the "Log In" link is disabled. I've tried various things all resulting in the same response. Is the link in a special protected area?

bd

Silver

Re: VPN client 'behind' a PIX?

Hi,

This link has several technical tips documents, that why I asked you to go to it. You only should be needing CCO login to login to this site.

Thanks

Nadeem

Community Member

Re: VPN client 'behind' a PIX?

Try this link - there is a partial pix configuration which is sort of like what you are trying to achieve (and you won't need to log in)

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009486e.shtml

HTH

Kev

90
Views
0
Helpful
4
Replies
CreatePlease to create content