UDP 500 and ESP

[agoodwin]

Hi,

Can anyone tell me a bit about ESP please? I can setup my router to allow through udp 500 but I assume I need a more specialised one to allow ESP - or does it just need other ports? A website would be good?

Apologies for possibly being a bit daft with this question

thanks for your time

Andy

[ywadhavk · Accepted solution]

Hi,

I guess you are asking about VPN tunnel. In that case,

ESP = port 50

AH = port 51

and

UDP port 500

These are the ports you require to open up. In addition, if IPSec over udp is used then UDP port 10000 needs to be opened.

As for ESP (Encapsulating Security Payload), please refer to RFC 2406

and more info on the below url;

http://www.cisco.com/en/US/partner/tech/tk583/tk372/technologies_tech_note09186a0080094203.shtml

Thanks,

yatin

[devam]

Hi Yatin,

I feel ESP and AH are Protocols and 50 and 51 are Protocol numbers.

Thank you.

Murthy.

[ywadhavk]

Murthy,

Ofcourse they are. I didn't think the '=' sign will be taken literally..

Yatin

[agoodwin]

Thats exactly what I needed - thanks for your help,

cheers

Andy