VPN Ports

[HMidkiff]

Does anyone know the ports which need to be open for a "ipsec-isakmp" vpn tunnel?

[srue]

udp 500 for phase 1

eg: access-list ACL_NAME permit udp any host x.x.x.x eq 500

protocol ESP for phase 2.

eg: access-list ACL_NAME permit esp any host x.x.x.x

if nat-t is used, udp/tcp 10000 depending on your configuration. or whatever other port you configure for this.

[Jon Marshall]

Harrison

UDP 500 - ISAKMP

ESP 50 - IPSEC

Optionally -

ISAKMP NAT-Traversal - UDP 4500 (NAT-T)

IPSEC Over UDP - UDP 10000 (Default)

IPSEC Over TCP - TCP 10000 (Default)

Jon

[srue]

eek..i can never rememeber 4500 for some reason.