Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

L2TP behind FWSM/ASA/PIX

0 views
Skip to first unread message

Greg

unread,
Jan 26, 2008, 12:05:01 AM1/26/08
to
I work for a company that is a small ISP. We have customers that we
provide managed firewall to. I have one such customer that is using
L2TP and PPtP behind my FWSM in a 6500. The VPN users authenticate
inbound and I have no problem with the PPtP users but the L2TP user
can't seem to login. Here is my ACL.

access-list 200 extended permit gre any host 10.100.212.138
access-list 200 extended permit tcp any host 10.100.212.138 eq pptp
access-list 200 extended permit udp any host 10.100.212.138 eq 1701
access-list 200 extended permit icmp any host 10.100.212.138
access-list 200 extended permit esp any host 10.100.212.138
access-list 200 extended permit tcp any host 10.100.212.138 eq 1701
access-list 200 extended permit udp any host 10.100.212.138 eq 3389
access-list 200 extended permit udp any host 10.100.212.138 eq isakmp
access-list 200 extended permit udp any host 10.100.212.138 eq 4500

Any suggestions?

0 new messages