03-15-2005 03:02 AM - edited 02-21-2020 01:39 PM
I have VPN server behind Router (or PIX), I use access-list to security. but I don't know that which ports need to open for VPN client access my network.
Can you help me !
Thanks and Regards,
03-21-2005 08:04 AM
You need to allow Port numbers 50 and 51 and udp port number 500
03-22-2005 08:55 AM
Hi:
Just to clarify, you need UDP port number 500 for ISAKMP and you need *protocol* 50 or 51 for IPSec, not port. Protocol 50 is ESP and 51 is AH.
When configuring an ACL, you specify the protocol (either ESP or AH) as you would IP, TCP or UDP. Also, for ISAKMP, I believe that you can specify xx.xx.xx.xx eq ISAKMP or eq 500.
~Dan
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide