.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How do I enable IPSec traffic through a firewall?
John Savill
April 3, 2000
1 Min Read
A. IPSec is generally invisible to routers since it operates at layer3 of the OSI layer an dall IP and upper-layer protocols are encrypted.
There is however a requirement for firewalls/gateways in the data path as thefollowing IP protocols and UDP ports must be forwarded and not blocked for IPSecto correctly work.
IP Protocol ID 50 - This is used for both inbound and outbound filters and is needed for Encapsulating Security Protocol (ESP) traffic to be forwarded
IP Protocol ID 51 - As above but used for Authentication Header (AH) traffic
UDP Port 500 - For both inbound and outbound filters and needs to allow ISAKMP (Internet Security Association and Key Management Protocol) traffic to be forwarded
L2TP (layer 2 tunneling protocol)/IPSec traffic looks the same as just IPSectraffic on the wire and you need to open IP Protocol ID 50 and UDP Port 500.
About the Author
You May Also Like
.png?width=700&auto=webp&quality=80&disable=upscale)