Motorola P-7131N-FGR Product Reference Manual page 690

B-8 Motorola Solutions AP-7131N-FGR Access Point Product Reference Guide
• An 'allow' inbound rule.
• An 'allow' outbound rule.
• For IKE, an 'allow' inbound rule.
These three rules should be configured above all other rules (default or user defined). When
Advanced LAN Access is used, certain inbound/outbound rules need to be configured to
control incoming/outgoing packet flow for IPSec to work properly (with Advanced LAN
Access). These rules should be configured first before other rules are configured.
• Question 12: Do I need to add any special routes on the access point to get my VPN
tunnel to work?
Scr <Remote Subnet IP range>
Dst <Local Subnet IP range>
Transport ANY
Scr port 1:65535
Dst port 1:65535
Rev NAT None
Scr <Local Subnet IP range>
Dst <Remote Subnet IP range>
Transport ANY
Scr port 1:65535
Dst port 1:65535
NAT None
Scr <Remote Subnet IP range>
Dst <WAN IP address>
Transport UDP
Scr port 1:65535
Dst port 500
Rev NAT None