Lock down site to site VPN 1

[chipCHE]

Greetings,

I just created a VPN from my Cisco Pix 515E to a Netscreen in a datacenter someone else manages.

The VPN is working fine; however, I would like to limit the traffic between sites to rdp. My Question is: What access-list do i make these entrys in. I have tried the access-list that is used to tag interesting traffic to be encrypted. I have also tried access-lists in both the inside and outside interfaces.

Regards and thanks in advance

 

[Supergrrover]

You're on the right track.
Take out the following line from you config
sysopt connection permit ipsec
This allows all VPN traffic to bypass ACL's. Apply your ACL's to the inside and outside interface and you should be up and running.




Brent
Systems Engineer / Consultant
CCNP