Cisco 800 VPN behind firewall

robbonner · ‎07-15-2008

Hello,

I am looking to have my current Cisco 800 VPN box sit behind my firewall. Does anyone have the information on which ports I would need to forward to the box to have it continue to work as a VPN appliance?

Thanks in advance!

dhananjoy chowdhury · ‎07-16-2008

Hi It depends on what type of VPN you have...

For IPSEC vpn's you need = UDP 500 (also sometimes it may need UDP 4500 and 10000)

for PPTP vpn = TCP 1723

Hope this helps.

michael.leblanc · ‎07-17-2008

If you are not using UDP or TCP encapsulation of IPSec to get through a NAT process, then you would also need to include the IPSec encapsulation protocol(s) being used:

Encapsulating Security Payload is IP protocol 50.

Authentication Header is IP protocol 51.

... in addition to the port numbers specified by the other responder.