cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6696
Views
0
Helpful
5
Replies

Great Firewall of china Blocking IPSec Ports..

ranjit123
Level 3
Level 3

Hello All,

 

Great Firewall of china is blocking all IPSec ports 5400 & 500 because of which we are not able to form any site to site VPN in sites iin china..

 

Is there any workaround for the same to make it work..

 

I am using cisco routers from remote end as well as Hub end..

 

Regards,

Ranjit

5 Replies 5

Bogdan Nita
VIP Alumni
VIP Alumni

Never tried it, but you could use IPsec over GRE.

Here is a config I was able to find:

https://networkology.net/2013/07/16/ipsec-over-gre-configuration-and-explanation-ccie-notes/

SAMEHELSAMMAK
Level 1
Level 1
have you tried this solution ?
if yes did it work ?

I managed to get the IPsec over GRE to work, but it seems like all IPsec came back up suddenly just after New Year.

Hi do IPsec tunnel to China working now or is it still blocked ?

Hi,
My company have pulled out of China, so the situation is no longer very relevant for me. I did manage to get VPN traffic through, by using IPSEC inside of a GRE tunnel. It required some old IOS software that still supported that.