NAT-T, IPSec over UDP 10000 & TCP 10000 - remote access VPN

Hello Expert,
When NAT-T, IPSec over UDP 10000 & TCP 10000 is enabled, what's the order of
operation? Is NAT-T always the priority?

I have a ASA VPN head end with Remote Access VPN configured and NAT-T
enabled.

PC User with Cisco VPN client at a remote site behind FWSM is having problem
connecting using UDP 4500. The connection is going over IP-Proto 50. It's
only working when I enabled IPSec over UDP 10000 or allow IP-Proto 50
inbound.

The client site firewall has outbound permit any any.

Any idea why?

Blogs and organic groups at http://www.ccie.net
Received on Thu Jan 21 2010 - 15:22:23 ART