Waiting for weeks for answer. What ports need to be open on DSL router for Cisco VPN to PIX 501 firewall connectivity?

Hi, newbie, first question. I have a few customers on BellSouth DSL. Most use a Westel DSL modem and I PPOE from the PIX, no problem. A couple of them have Cayman DSL routers and the router gets the real world IP. I was playing with the pinhole config in the Cayman today, could not establish a VPN connection. The Cayman asks for a start and stop range of ports on the outside, the inside IP and the inside port. I setup TCP and UDP for ports 4500 and 10000 directed at the PIX's outside IP. Did not work. I plugged in ports 4500 and 10000 in both entry tables of the Cayman outside ports. What am I doing wrong? I figure that I either the ports are not right and/or the entries are not correct in the Cayman. Thanks in advance!
sgtsonlineAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Technicon-SGCommented:
Have your ISP setup the Cayman as a Bridge (or Transparent Bridge)...this will allow your PIX to do all of the management for your WAN connection...This will be much more efficent than trying to "pinhole" (or port forward) in the Cayman...You will need to configure the PIX to do the PPPoE authentication to the ISP...But this will save you hours of headaches in the future.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GATOR420Commented:
Try ports 500, 1723, and 3389.
sgtsonlineAuthor Commented:
ISP is Bell South. I looked hard at the router and did not see the function to bridge instead of route. I can buy a Westel DSL modem for $100 and then have the PIX do the PPPoE login. I will try Bell South and see if they have a clue.

Thanks

3389 is for remote desktop. I will try 500 and 1723 but think I want to bridge the router or just replace it like Technicon said.

sgtsonlineAuthor Commented:
I setup bridge mode in the dsl router. Have done it now on Netopia and 2 cayman. Just setup bridging over ethernet and then pppoe with PIX. Thanks.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Broadband

From novice to tech pro — start learning today.