Which ports for VPN

[nhuongpham]

I have VPN server behind Router (or PIX), I use access-list to security. but I don't know that which ports need to open for VPN client access my network.

Can you help me !

Thanks and Regards,

[umedryk]

You need to allow Port numbers 50 and 51 and udp port number 500

[dan.shalinsky]

Hi:

Just to clarify, you need UDP port number 500 for ISAKMP and you need *protocol* 50 or 51 for IPSec, not port. Protocol 50 is ESP and 51 is AH.

When configuring an ACL, you specify the protocol (either ESP or AH) as you would IP, TCP or UDP. Also, for ISAKMP, I believe that you can specify xx.xx.xx.xx eq ISAKMP or eq 500.

~Dan