This is for UDP encapsulation of machines behind the device that are being NATd. NAT generaly reeks havoc on IPsec since it changes the headers, by tunneling in a UDP packets you can get around this as the UDP header does not change.

At 02:24 PM 4/22/2002 -0400, Brian Browne wrote:
Not sure what the problem is or was -- you asked for what the Cisco VPN used it for.  Not sure why Cisco wouldn't know this either.  You should only need to use this feature if you have NAT issues with your VPN at sites where you can't resolve IPsec vs. NAT issues through other means such as a topology that avoids the order of operation issue.  This means ensuring that any NAT operations occur "outside" your tunnel.  In certain situations, you may not be able to do that, so this provides alternative approach.
 
- Brian
-----Original Message-----
From: Groomes, Jay [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 22, 2002 2:09 PM
To: Brian Browne; [EMAIL PROTECTED]
Subject: RE: RSCS0 10000/UDP

Brian,
 

Thanks, but how come when I talked to Cisco, they had no knowledge of this?  I had to go through all my firewall logs in order to research the problem.  They were telling me the problem resided on our internet facing router, and ESP was not being allowed through.  This was not the case because once I allowed RSCS0 to come through the firewall, I had not more problems.
 

Jay
 

 

-----Original Message-----
From: Brian Browne [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 22, 2002 2:05 PM
To: Groomes, Jay; [EMAIL PROTECTED]
Subject: RE: RSCS0 10000/UDP
 

It's the default port used by Cisco VPN 3000 series for tunneling IPsec over UDP (to avoid NAT order of operation issues).
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Groomes, Jay
Sent: Monday, April 22, 2002 1:58 PM
To: [EMAIL PROTECTED]
Subject: RSCS0 10000/UDP
All,
 

Does anyone happen to know what this service does?  I understand that is needs to be used for my Cisco VPN, but what it is exactly? I can t seem to find any information on service.  Any help would be greatly appreciated.
 

Thanks,
 

Jay Groomes
Network Security Administrator
Amerix Corporation
 

Reply via email to