|
Ingress
|
IKE (UDP/500) from remote tunnel endpoint to local tunnel endpoint
|
Permit
|
|
Ingress
|
ESP/AH from remote tunnel endpoint to local tunnel endpoint
|
Permit
|
|
Ingress
|
Allowed ICMP from any IP address to local tunnel endpoint
|
Permit
|
|
Ingress
|
Default
|
Deny
|
|
Egress
|
IKE (UDP/500) from local tunnel endpoint to remote tunnel endpoint
|
Permit
|
|
Egress
|
All allowed services from any local subnet to any IP address
|
Permit
|
|
Egress
|
Allowed ICMP from local tunnel endpoint to any IP address
|
Permit
|
|
Egress
|
Default
|
Deny
|