Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

how to check the port status in IPSec VPN

Hi Experts,

Is there any way by which we can find that the UDP port 500 is blocked at ISP side.

My IPSec VPN configured between two cisco router in production network is not coming up and experts are saying that the ISP has blocked the port 500 somewhere in between, however ISP denying and saying that they dont block any port.

kindly suggest what whould be the best wayout?


Everyone's tags (4)
Hall of Fame Super Silver

Re: how to check the port status in IPSec VPN

You could scan the router's IP address on udp/500 using nmap.

If you have (or can insert) a switch between the router and ISP, you could span the port and capture traffic coming into your router from your initiating peer. capture the traffic on a PC running wireshark.

If your router platform supports it, you can also use Embedded Packet Capture (EPC). Reference.

New Member

Thanks Marvin,How could I

Thanks Marvin,

How could I capture the traffic from initiating peer so that I can figure out that UDP port 500 is blocked or not, with the help of wireshark...

In my network ONT/Modem (having four ethernet port) is installed at both the end and from one of its port the router is connected at each side and IPSec VPN is configured between the router. to check the UDP port status, my question is, should i connect my laptop (running with wireshark) with one of the port of ONT and capture the traffice or is there any other way and how that traffice will tell me that port 500 is blocked or not?

Sorry for posting too late,

Sorry for posting too late, but hope that helps, I've wrote small blog post about this special case of checking