Solved

Config Site to Site VPN on Cisco RVS4000 behind Router

Posted on 2011-09-18
5
891 Views
Last Modified: 2012-05-12
Hi experts:

I'm trying to create a site to site VPN from my house to a data center that has a ASA 5505.  The issue is that at home I have to use the ISP's router (Verizon FiOS)  So, my question is...what ports do I have to forward from my ISP's router to my Cisco RVS4000 to properly configure the site to site connection?
0
Comment
Question by:polaris101
  • 2
  • 2
5 Comments
 
LVL 32

Expert Comment

by:harbor235
ID: 36559649


I assume you mean you want to terminate teh VPN on the RVS4000 via a site-to-siteVPN?
UDP 500(isakmp), IP 50(ESP) and 51(AH), this should do the trick,

I would enable nat traversal making IPSEC nat aware


harbor235 ;}
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 36559655
Assuming you use IPSec:

UDP port 500 for IKE
When using IPSec NAT traversal, UDP port 4500

Also you need to forward two protocols (so not ports): protocol 50 (ESP) and protocol 51 (AH).
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 36559660
Hm, close call ;)
0
 

Accepted Solution

by:
polaris101 earned 0 total points
ID: 36939713
Well, I found out in order to use my own router with FiOS I have to put a call in and have them use the ehternet instead of the coax from from the unit they provide.
0
 

Author Closing Comment

by:polaris101
ID: 36967073
Put call in to ISP
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Can Cisco resolve internet address internally 4 44
VIRTUAL NETWORKING 3 62
Palo Alto Networks: Packet Trace Simulator? 2 46
ASA Tunnel 18 30
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question