03-25-2018 12:15 PM - edited 02-21-2020 07:33 AM
Dears,
I want to change the client service port from 443 to some other port, I want to know which port range should be used for this client services, if I m not wrong the private port cannot be used.
crypto ikev2 enable OUTSIDE client-services port 443
crypto ikev2 enable OUTSIDE client-services port ?????
Ports with numbers 0–1023 are called system or well-known ports; ports with numbers 1024-49151 are called user or registered ports, and ports with numbers 49152-65535 are called dynamic and/or private ports.
03-25-2018 03:23 PM
Thomas,
why would you want to change it?
have you got one public IP or something and you are already running a webserver that responds to 443?
03-26-2018 12:31 AM
I am giving my customer anyconnect vpn client directly by dropbox I want to disable the client services completely or to some other port so that the public IP should not be accessible from Internet on well know port.(443)
Hence whenever the user wants the anyconnect client and when they enter in their browser https//:publicip the certificate presented to the user is a CA signed still the direct access to the public ip on port 443 is a risk ???
if it is a risk then I shld change to some other port or I have to disable them, once disabling I hope it will not affect the other site to site IKEv2 vpn ??
thanks
thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide