[nsp] Access-list question

[Mark Persiko]

The IP # "50" is neither TCP nor UDP, but it's a different Layer-4
protocol (called ESP = "Encapsulation Security Payload.)

As a result, the access-list would be:

! ISAKMP
access-list 131 permit udp any any eq 500
! ESP
access-list 131 permit esp any any

Thanks,
 Mark

- Mark C. Persiko, Network Engineer
- IT Division, Boulder Valley School District



-----Original Message-----
From: Kevin [mailto:kevin at honeycomb.net] 
Sent: Monday, October 27, 2003 12:51 PM
To: cisco-nsp at puck.nether.net
Subject: [nsp] Access-list question


Does anyone know how allow ipsec through an accesslist?
I know ipsec uses port 500 UDP and port 50 IP?

Would it be?:
access-list 131 permit udp any any eq 500
access-list 131 permit tcp any any eq 50
access-list 131 permit udp any any eq 50

Kevin,




_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/