Simple question

[paultaylor04]

PIX

I am configuring a simple IPSEC tunnel between a PIX and a router. These devices are connected directly using a crossover cable.

Question:
Do I need to place an access list on the PIX's outside interface allowing IPSEC/ISAKMP packets to come through or do the ipsec,isakmp commands do that automatically?

 

[chicocouk]

You need the following command

sysopt connection permit-ipsec

Documentation is here:

http://www.cisco.com/en/US/products...eference_chapter09186a00800ec9eb.html#1026942