The influence and solution of ASA firewall on IPSec VPN in Middle network

Source: Internet
Author: User
Tags firewall

The IPSec VPN realizes the network expansion, the firewall realizes the control and the filtering to the network traffic, therefore has the influence to the IPSec VPN communication.

The default ASA maintains a state session only for UDP/TCP traffic, and therefore discards the ESP traffic that is returned. There are two ways to solve the problem

One uses ACLs to release ESP traffic.

Two applications check IPSec VPN.

Experimental topology

R1 configuration:

Crypto ISAKMP Policy 10
ENCR 3DES
Authentication Pre-share
Group 2
Crypto ISAKMP key Cisco address 192.168.200.2 No-xauth
!
!
Crypto IPSec Transform-set Trans Esp-des Esp-md5-hmac
!
Crypto map R1 IPSEC-ISAKMP
Set Peer 192.168.200.2
Set Transform-set trans
Match Address VPN
!

Interface Loopback0
IP Address 1.1.1.1 255.255.255.0
!
Interface fastethernet0/0
IP address 192.168.100.1 255.255.255.0
Duplex Auto
Speed auto
Crypto map R1

IP Route 0.0.0.0 0.0.0.0 192.168.100.254
!

IP access-list Extended VPN
Permit IP 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255

ASA configuration:

Interface ethernet0/0
Nameif outside
Security-level 0
IP address 192.168.100.254 255.255.255.0
!
Interface ETHERNET0/1
Nameif inside
Security-level 100
IP address 192.168.200.254 255.255.255.0

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.