Cisco to 515 VPN 1

[thegirlofsteel]

am a newby tech girl and I have started working for a company. They have branch offices in outlining areas. One of our branch offices needs a VPN set up through the local college. The IT people have contacted me and asked that I supply them with the open port number on our cisco pix firewall. I know how to telnet into the pix and look around a bit but I'm not sure what port number it's use'n or how to find out that info. Is there anyone that could give me a quick step by step on how to find out that info. I feel like a dumb dumb but if ya don't ask you'll never learn so teach me oh wise one's!

 

[themut]

Is the Tunnel going to end on your PIX firewall? Or is it just going to pass through your firewall? The link below is an excellent guideline configuring an IPSec tunnel through the PIX:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009486e.shtml

The link below will guide you configuring a PIX to router IPSec tunnel:

http://www.cisco.com/en/US/products...s_configuration_example09186a0080094498.shtml

Hope this helps!

 

[thegirlofsteel]

Here is the problem. The local college has a different firewall router. I don't know what it is. The computer that belongs to us gets internet access through the college. She has the Cisco VPN dialer on her computer. So first she must pass through their (the college router) to our PIX 515 and on to our network.

The college wants to know what the port number that the dialer is using to allow access from their router.

I just need to know how to look at which port number is open. A little background - I have 7 branch offices. Each except this one uses pix 505's to connect.) This is a one person branch and doesn't need the pix 505 and just the dialer. Can this be the problem. I don't have a problem using the dialer from any other computer. But then again, I'm not behind a firewall.

 

[themut]

On your PIX 515 you need to enable NAT Tranversasl (NAT-T), then all traffic will flow on UDP ports 500 and 4500. To enable NAT-T you need to issue the command:

isakmp nat-traversal <keepalive>

You need software version 6.3 to be able to configure this command.