which are the ports needed to be opened for ipsec vpn to pass through?

Aug 27, 2006 2 Replies

we using a network like this


lan ---> pix (doing pat) -----> internet(dsl) ----> vpn server


about 20-30 clients on the lan need to do vpn to server.



we r using safenet ipsec vpn client



pix is 506e



what ports needed to be opened to allow vpn? is it protocol 50,51 &udp



500

can anyone give a sample command required to be added to to allow vpn connection


regards & thanks



you need to pass source and destination UDP ports 500 and 4500, unless you don't use TCP for IPSec...UDP is default. Also, esp and ah traffic must be passed trough.

B.R. Igor

I think that all you need is : isakmp nat-traversal

regards

jarcar

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required