Great Firewall of china Blocking IPSec Ports..

[ranjit123]

Hello All,

Great Firewall of china is blocking all IPSec ports 5400 & 500 because of which we are not able to form any site to site VPN in sites iin china..

Is there any workaround for the same to make it work..

I am using cisco routers from remote end as well as Hub end..

Regards,

Ranjit

[Bogdan Nita]

Never tried it, but you could use IPsec over GRE.

Here is a config I was able to find:

https://networkology.net/2013/07/16/ipsec-over-gre-configuration-and-explanation-ccie-notes/

[SAMEHELSAMMAK]

have you tried this solution ?
if yes did it work ?

[linux4ever]

I managed to get the IPsec over GRE to work, but it seems like all IPsec came back up suddenly just after New Year.

[Santosh Shetty]

Hi do IPsec tunnel to China working now or is it still blocked ?

[linux4ever]

Hi,
My company have pulled out of China, so the situation is no longer very relevant for me. I did manage to get VPN traffic through, by using IPSEC inside of a GRE tunnel. It required some old IOS software that still supported that.