|
Posted by Mr_Huang on August 27, 2007, 7:51 pm
If you were Registered and logged in, you could reply and use other advanced thread options
interface or CommandLine?
"unset ike gateway name" didn't work
> thank you for your valurable information,
> Is there a way to telnet to the remote device/gateway from my NS25 to
> see if those ports is opening or not.
>
>
>
>
> > > Dear guru,
> > > I'm pretty new to NS, we have configured the Lan-to-lan VPN as per the
> > > instruction in the manual, however, the tunnel failed and inactive by
> > > "get sa". Wondering it would be blocked by the ISP-router, we have
> > > asked our ISP to open the "VPN" ports. we are using g2-esp-3des-sha
> > > for P2 and Pre-g2-3des-sha for P1.
>
> > > What ports are required on my router to allow such connection.
> > > udp/500 for ipsec?
>
> > You'll have to open 500/udp for negociations, and ESP protocol for
> > encapsulated traffic (unless there is NAT on the way and NAT-T
> > extension used, in that case, you'll have to open 4500/udp).
>
> > Yvan.- Hide quoted text -
>
> - Show quoted text -
| 
XML site map