I did indeed read the manual before raising a ticket in the forum and I do appreciate that you do not have to answer any particular question out of work hours. I have just re-visited the manual on page 107 and feel no more enlightened. As a fellow CCNP, could you explain what the relevance of tcp/873 is then for my scenario eg. internal DSS is replicating to a DSS on the outside? I first allowed access to this port from outside and the file rep still did not work. I saw on my Cisco log that the outside DSS was trying to send icmp packets to the internal DSS, so allowed this and then everything works. I have removed access to tcp/873 from outside and everything continues to work. Perhaps I am rather thick, but I have read nothing about needing to allow ICMP packets from the outside to the internal address of the inside DSS. Are you saying that the documentation is clear in this case?
Reply With Quote