PIX IPSEC VPN: how to filter traffic

[sghezzi]

Hello,

I have set up an IPSEC VPN between two PIX and it works. Now I would like to filter the destination addresses where the remote host can access to andalso what kind of traffic.

Is it possible?
How?

Thanks a lot

Silvia

 

[yizhar]

HI.

It can be done by:

1) Testing connectivity before any changes.
2) Adding relevant statements to the (existing) access-list bound to the outside interface of the destination pix.
3) no sysopt connection permit-ipsec
4) Testing connectivity again.

Use syslog messages of the pix to monitor for any problems and misconfiguration.

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar