Moving the IKE port??

[c-dudley]

Hi all,

I was wondering if there was a way to change the IKE port on a 3000 series concentrator to get it off of udp500.

Thanks,

Chris

[engel]

I don`t think it is possible. AFAIK, the UDP port 500 is assigned by the IETF to the IKE protocol. I think, the OS coder uses UDP/500 to create the VPN3000`s OS. But if you get any information, please let me know.

Regards,

Engel

[r-ta]

If you use plain IPSec, or IPSec over udp, you will use udp 500.

If you use IPSec over TCP, you can use any tcp port (subject to your firewall filters). All required packets, including ike will be encapsulated in tcp. You may see some udp packets to 500 and 6xxxx, but they are not needed.

Roderick