pfw: 65534 Deny P:50 10.0.x.x 62.x.x.x in (VPN PIX501)

Question

Level 2

244 points

pfw: 65534 Deny P:50 10.0.x.x 62.x.x.x in (VPN PIX501)

I'm trying to connect trough VPN and with the last roule activetated i alway got this error...
does someone know what P:50 means?

thx

Xserve G4, XRAID..., Mac OS X (10.4.2)

Posted on Feb 17, 2006 12:50 AM

Reply

Answer 1

Feb 21, 2006 5:20 AM in response to C.Moser

ESP Encapsulated Security Payload - is where the data goes.

If ESP is stopped by the firewall (either side) or if individual protocols/services (UDP/TCP ports) is stopped after the VPN tunnel termination point, all or some traffic might be blocked.

Reply

Answer 2

Feb 17, 2006 8:22 AM in response to C.Moser

Try enabling ESP protocol (protocol 50) in the firewall.

Are you trying to connect to a PIX with VPN (IPSec) site to site?

Reply

Answer 3

C.Moser Author

Level 2

244 points

Feb 21, 2006 4:30 AM in response to Leif Carlsson

yes....but the connection between the host is ok, but i cannot use smb or rdc

Reply