VPN Client NAT Traversal Ports

[chris.ames]

I need to allow access to PCs behind a Borderware firewall performing PAT running the VPN client to a PIX running 6.3 - what ports/protocols need to be opened up on the Borderware firewall? As far as I can tell, it will be UDP port 500 and TCP port 10000 (or whatever will be configured on the client). The network will look something like:

Client--------BorderWare-----------PIX----------Server

[afakhan · Accepted solution]

Hi

they would be :

udp 500

udp 4500 (NAT-T)

no need for tcp port, pix 6.3.1 doesn't support ipsec/tcp, its only ipsec/udp.

Thx

Afaq