Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPsec over tcp

Hello ,

I am looking for a sample config for IPsec over tcp (port 1000) for cisco 12.4 ios (2610xm)

regards,

Andrew

1 ACCEPTED SOLUTION

Accepted Solutions

IPsec over tcp

I dont have cisco link for that but its global command just mentioned the port and allow your outside ACL for port tcp 10000.Once done change the transport setting in your VPN client for TCP port 10000.

Thanks

Ajay

11 REPLIES

IPsec over tcp

you need configure "crypto ctcp port 1000" on router and on the Vpn client side, enable ipsec over tcp for the specific port as well.

New Member

IPsec over tcp

I am using advance enterprise ios and that command doesn't exist. Shall i upgrade to security ios?

New Member

IPsec over tcp

Hello Ajay,

I upgrade the router to the version 12.4(9) and now i can use the command "crypto ctcp port 10000". Do you have any documentation how to enable ipsec over tcp?

Thanks

Andrew

IPsec over tcp

I dont have cisco link for that but its global command just mentioned the port and allow your outside ACL for port tcp 10000.Once done change the transport setting in your VPN client for TCP port 10000.

Thanks

Ajay

New Member

IPsec over tcp

Hello  Ajay,

After the upgrade and the command which you mention is working and i can connect with the mac book too (unfortunetely Apple prefers only IPsec over tcp)

Thanks

Andrew

IPsec over tcp

So is it solved or something still left ?

New Member

IPsec over tcp

Yes it is

One last question , do you know if i can assign the same ip to spesific vpn client?

IPsec over tcp

Do you mean fixed IP for specific VPN user ?

New Member

IPsec over tcp

Yes

IPsec over tcp

I am sure we do it on ASA but IOS not 100 % sure if authentication id done by Radius then yes attributes can be set.

Might be other knows.

Thanks

Ajay

New Member

IPsec over tcp

No worries,

Thanks for your help

Andrew

1107
Views
0
Helpful
11
Replies
CreatePlease login to create content