Port 500 required?

[matt_hocker]

I'm having trouble connecting my VSS 1st gen to my company-provided Cisco ASA. We have a static IPSec VPN in place between this ASA and our company VPN concentrator which uses port 500. I have no ability to change this.

I can set up a static IP address for the VSS and I can forward all the other ports to it, but I can't forward port 500 because that's in use by the VPN.

Will it work in this environment?

[bigsy]

You could try adding 'inspect ipsec-pass-thru' to the ASA global policy-map. This works for me without the need to forward any ports on an ASA 5505 (running ASA v9.01, VSS third generation).

[Jenny]

 Hi matt_hocker,

Welcome to the eForum!

Have you tried bigsy’s suggestion above? Please give this a go and let us know how you get on.

Thanks,

Jenny