VPN ports

Ho un problema di configurazione di una VPN Pix-to-Pix tramite rete Fastweb. Sulla rete interna ho un server SMTP, ho un unico indirizzo pubblico e posso NAT-are o un intero indirizzo privato sul pubblico oppure posso NAT-are fino ad un massimo di 10 porte da più indirizzi interni sul pubblico. La mia attuale configurazione è la seguente:

I have a problem with VPN Pix-to-Pix. In inside interface of Pix i have an SMPT server. I have one pubblic IP and i can make nat for a number of max ten ports (rules of my provider) from inside ip address to global ip addres. My configuration is:

IP private port protocol IP pubblic port

192.168.1.1 http (80) tcp/udp 83.x.y.z http (80) 192.168.1.1 https (443) tcp/udp 83.x.y.z https (443) 192.168.1.1 isakmp (500) tcp/udp 83.x.y.z isakmp (500) 192.168.1.1 ipsec (1293) tcp/udp 83.x.y.z ipsec (1293) 192.168.1.1 pptp (1723) tcp/udp 83.x.y.z pptp (1723) 192.168.1.1 ipsec-nat-t (1723) tcp/udp 83.x.y.z ipsec-nat-t (1723) 192.168.1.1 ssh (1723) tcp/udp 83.x.y.z ssh (1723) 192.168.1.2 smtp (25) tcp/udp 83.x.y.z smtp (25) 192.168.1.2 imap (143) tcp/udp 83.x.y.z imap (143) 192.168.1.2 pop3 (110) tcp/udp 83.x.y.z pop3 (110)

All works well but the VPN with remote peer.

Is it necessary turn on other ports ? What ports ?

Thanks a lot

Simone Stanzani

Reply to
Simone Stanzani
Loading thread data ...

Hi Simone,

You may wish to investigate the Cisco PIX VPN GUI Config:

formatting link
Sincerely,

Brad Reese BradReese.Com=AE Cisco Resource Center Toll Free: 877-549-2680 International: 828-277-7272=20 Website:

formatting link

Reply to
BradReeseCom

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.