Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can a cisco PIX 515e tunnel SCTP traffic over an IPSEC tunnel ?

I Know that the PIX doesn't support SCTP connection's but SCTP is still IP so i'm hoping the PIX has the capability to route SCTP over an IPSEC tunnel.

Also how would the access-list have to be specified for the encryption domain, would "ip" as the protocol catch SCTP traffic or should I specify SCTP explicitly by protocol number ?

share|improve this question
up vote 1 down vote accepted

Should have no problem tunneling the traffic; an IPSEC tunnel shouldn't care what the connection protocol is, as long as the transport is IP.

I'd recommend just setting up the specific protocol in the interface and crypto map ACLs, to make sure you're not getting unexpected results.

share|improve this answer
Yes it is up and working as expected now. I always assumed it "should" work but the below link (The top hit in google for 'cisco pix + sctp') suggested there may be issues: [link] – Steven Williamson Jul 5 '11 at 19:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.