Re: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Engelhard M. Labiro
Permit the following for IPSEC traffic: IKE : UDP port 500 ESP: protocol 50 HTH - Original Message - From: "Andy" To: Sent: Friday, August 17, 2001 10:38 PM Subject: Access list to allow IPSEC traffic through? [7:16367] > Hi > > Does anyone know the correct requirements to allow IP

RE: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Kent Hundley
Andy, For future reference, when in doubt its always best to go to the source, i.e the RFC's. You can get a complete reference of the RFC's at: http://www.rfc.net Having said this, in general for IPSec to work you'll need to allow ISAKMP, which uses UDP port 500. This is _usually_ both the so

RE: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Jim Bond
How to permit or deny IP protocol 50 or 51? Access-list 100-199? Thanks in advance. Jim --- Kent Hundley wrote: > Andy, > > For future reference, when in doubt its always best > to go to the source, i.e > the RFC's. You can get a complete reference of the > RFC's at: > > http://www.rfc.net

Re: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Charles Manafa
access-list 101 permit esp host x.y.z.1 host a.b.c.d access-list 101 permit ahp host x.y.z.1 host a.b.c.d CM - Original Message - From: Jim Bond To: Sent: Saturday, 18 August, 2001 01:59 Subject: RE: Access list to allow IPSEC traffic through? [7:16367] > How to permit or deny