port 4500

[Ibrahim Jamil]

Hi

if y need to enable VPN IPSec through the firewall. y just need to need to allow the port 4500?

[Jennifer Halim]

It really depends on whether there is NAT or not between the 2 IPSec VPN sites.

By default, here is the IPSec VPN protocol:

- UDP/500 (Phase 1)

- ESP protocol (Phase 2)

And since ESP protocol can't be NATed as it is not a TCP or UDP port, but a protocol, you can enable the VPN peer with NAT-T (NAT-Transparency) which by default run on UDP/4500. It encapsulates the ESP procotol into UDP/4500 so it can be NATed if it's required.

In this case, the IPSec VPN protocol is:

- UDP/500 (Phase 1)

- UDP/4500 (Phase 2)

Hope this helps.

[Ibrahim Jamil]

thanks Halim