Hi,
How can i create a tunnel between 2 sites and allow ONLY HTTPS access over the tunnel to a particular server ( 192.168.1.53)??
What will the access list be for this??
Please help!! Thanks in advance.
-Parvinder bhasin
Limiting access inside a VPN TUNNEL
Mar 23, 2006
1 Replies
That would depend upon the platform and software version.
If it were PIX 5 or PIX 6, I would use something like
access-list nonat_acl permit tcp any host 192.168.1.53 eq 443 access-list VPN2there_acl permit ip any host 192.168.1.53 access-list in2out permit tcp any host 192.168.1.53 eq 443 access-list in2out deny ip any host 192.168.1.53 access-list in2out permit ip any any
nat (inside) 0 access-list nonat_acl access-group in2out in interface inside crypto map 10 match address VPN2there_acl
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required