[vpn] RE: inbound acl on PIX VPN

[Bilgrav, Martin]

Hiya,

In your Crypto map you specify an ACL for the traffic that is identified as
trafic that needs encryption.
Then in this ACL you make your statements. and remember to make this acl
reversable if your are useing pix-to-pix tunnels.

hth
Martin Bilgrav

-----Original Message-----
From: J . Dorsey [mailto:dorsey at colquitt.org]
Sent: Wednesday, August 29, 2001 12:57 AM
To: VPN mailing list
Subject: inbound acl on PIX VPN


	How can I apply an acl (or other control) to traffic received by
a PIX firewall through a VPN tunnel?

	My search turned up only controls on inbound traffic on
interfaces, and outbound VPN traffic.  I could control this at the other
end of the tunnel, but the other end may be untrusted.

	I'm currently at 5.2(X) on the PIX.  Any help or pointer to TFM
is appreciated.

Cheers,
John


VPN is sponsored by SecurityFocus.com