adamdma

Just thought I might drop a note about a problem with our Toshiba CTX670/CTX100 System.

The company I work for had been successfully using the Toshiba system between three different locations, one of which was in another state. After upgrading the IOS firmware on our main Cisco router (a 3640) the data which goes between locations for the LCD to display suddenly stopped working.

Long story short, the Strategy card sends that information from source port 0. Since we are running the Cisco CBAC for our firewall on all the subnets, and since port 0 is NOT A VALID TCP/UDP PORT TO USE, all packets were immediately discarded.

Toshiba says that this isn't a problem, but I would tend to agree with the original RFC that says that port 0 is reserved and SHOULD NEVER BE USED.

Solution? Offload our internet connection onto a seperate 3640, use CBAC there, and use the original 3640 for all VPN traffic.

Has anyone else had this problem? Am I making any sense? Does my solution sound reasonable? I am very excited to find this forum and hope very much for some kind of response.

thanks,
-a