topic Hi thnx for replay in Network Security

Telnet UDP port

tankvishal1108 — Tue, 12 Mar 2019 07:06:50 GMT

I want to test connectivity on udp port 500 on other side

how could i check whether udp port 500 is up or not

what command used on cisco router and ASA?

You Can use packet tracert in

md.irfan.khans — Wed, 06 Jan 2016 11:04:42 GMT

You Can use packet tracert in ASA and check the logs on Router

packet-tracer input [src_int] protocol src_addr src_port dest_addr dest_port

Ex for ASA : packet-tracer input ( Interface name ) tcp 10.1.1.1 5067 10.4.1.1 23

Basically I am establishing a

tankvishal1108 — Wed, 06 Jan 2016 11:47:05 GMT

Basically I am establishing a tunnel between router and firewall

on firewall by default icmp is disable

i want check end to end connectivity

how can i check that;

firewall is not under my administration

i have only access to router..

hi,

johnlloyd_13 — Wed, 06 Jan 2016 13:50:16 GMT

hi,

you can't use telnet to test UDP. telnet is used for testing TCP ports only.

you can issue the show crypto ipsec sa if it's a cisco router.

see helpful link:

http://ccnpsecuritywannabe.blogspot.com/2014/08/ikev1-ipsec-site-to-site-vpn.html

871W#show crypto ipsec sa

interface: BVI1
    Crypto map tag: 871_IKEv1_CMAP, local addr 192.168.1.1

   protected vrf: (none)
   local ident (addr/mask/prot/port): (192.168.1.1/255.255.255.255/0/0)
   remote ident (addr/mask/prot/port): (192.168.1.2/255.255.255.255/0/0)
   current_peer 192.168.1.2 port 500

Hi thnx for replay

tankvishal1108 — Wed, 06 Jan 2016 18:19:50 GMT

Hi thnx for replay

I know step for establishing tunnel between two point's

But before establishing tunnel we use to check end to end connectivity.

as you shared a link

consider i am configuring site-to-site vpn on router

and ASA is other end of tunnel which shared me the required parameter(and they have opened udp port 500 and 4500)

But before configuring all policy generally we use to check connectivity; whether other end is reachable or not

how will you check if icmp is disable on the firewall

hi,

johnlloyd_13 — Thu, 07 Jan 2016 13:20:01 GMT

hi,

you can check the ACL and MPF configured on the ASA.