L2TP behind FWSM/ASA/PIX

Jan 26, 2008 0 Replies

I work for a company that is a small ISP. We have customers that we provide managed firewall to. I have one such customer that is using L2TP and PPtP behind my FWSM in a 6500. The VPN users authenticate inbound and I have no problem with the PPtP users but the L2TP user can't seem to login. Here is my ACL.



access-list 200 extended permit gre any host 10.100.212.138 access-list 200 extended permit tcp any host 10.100.212.138 eq pptp access-list 200 extended permit udp any host 10.100.212.138 eq 1701 access-list 200 extended permit icmp any host 10.100.212.138 access-list 200 extended permit esp any host 10.100.212.138 access-list 200 extended permit tcp any host 10.100.212.138 eq 1701 access-list 200 extended permit udp any host 10.100.212.138 eq 3389 access-list 200 extended permit udp any host 10.100.212.138 eq isakmp access-list 200 extended permit udp any host 10.100.212.138 eq 4500



Any suggestions?


Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required