What client protocol/ports outbound/inbound should be open for ipsec vpn client to make successfull connection?
Thanks in advance
VPN Client 5.01 Ports
Apr 16, 2008
4 Replies
ISAKMP is udp port 500. You can use keyword "isakmp" in your ACLs.
If you use the client from behind a NAT firewall using UDP encapsulation (port 4500), use can use keyword "non500-isakmp" in your ACLs.
If you are connecting to a PIX, I think you have the option of using TCP encapsulation through NAT (port 10000?, configurable?).
ESP is IP protocol 50. Use keyword "esp" in your ACLs instead of "ip".
Best Regards, News Reader
Ports Needed for PPTP VPN
- TCP Port 1723
- UDP Port 500
Ports Needed for L2TP VPN
- TCP Port 1701
- UDP Port 500
Ports Needed for IPSec/ESP
- UDP Port 500
-50 for Encapsulation Header (ESP)
-port 51 for Authentication Header (AH).
Not port, "ip protocol" 50
not port 51, "ip protocol" 51
Best Regards, News Reader
PPTP uses TCP/1723 and IP 47
formatting link
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required