Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PORTS TO BE OPENED FOR ACS

Our VPN 3030 Concentrator is sitting in the DMZ zone of our firewall. The ACS is sitting behind the firewall inside our LAN. Our mobile users are authenticated through the ACS server when they wants to establish a VPN connection to our network. Currently I allow all TCP/UDP ports from the Concentrator to the ACS. I am asked to change this to just open the necessary TCP/UDP ports, i.e, only the TCP/UDP ports needed by the ACS to work will be allowed to flow from the Concentrator to the ACS. What TCP/UDP ports must I open in order ACS to work? Thanks.

1 REPLY
Cisco Employee

Re: PORTS TO BE OPENED FOR ACS

Assuming you're doing Radius authentication, then you'd need to open UDP ports 1645 and 1812. If you're doing accounting also, then open UDP ports 1646 and 1813.

100
Views
0
Helpful
1
Replies