VPN Client (inside to outside)

[w_basheer]

Hi;

I need to configure My pix so one of my clients can extablish a VPN tunnel the outside?

outside --- PIX -- Client (VPN Client)

what access lis needed to be configued on the PIX?

help please.

[b.hsu]

Try this:

In order to be able to establish a VPN tunnel you need to make sure that UDP and ESP is open.

You need to open...

UDP on port 500

UDP on port 4500

ESP (no ports).

Using access-lists:

access-list 101 permit udp any any port 500

access-list 101 permit udp any any port 4500

access-list 101 permit esp any any

also make sure that you have command: fixup protocol esp-ike

[jms112080]

fixup protocol esp-ike is not an option in version 7 code. Is ipsec-pass-through the same?

[w_basheer]

Thanks.

This is what i need.

Thank you.