Re: Nortel Contivity VPN and Firewalls

["Peter Van Eeckhoutte" <peter.ve () pandora be>]

I don't think you need tcp 57... only UDP 500, and IP protocol 50 and/or 51
(depending on if you are using ESP (I think that is the default setting with
Nortel) or AH)


----- Original Message ----- 
From: <Leonard.Ong () nokia com>
To: <Henry.Won () jda com>; <security-basics () securityfocus com>
Sent: Thursday, August 14, 2003 5:26 AM
Subject: RE: Nortel Contivity VPN and Firewalls


Hello All,

Thanks for your inputs on allowing Nortel VPN. Basically the simplified
version would be :

Host in Extranet -> Firewall -> Internet -> Nortel VPN Gateway

Now, we need to have a correct ports open on Firewall.  From the inputs I've
received so far :
a. UDP 500
b. IP Protocol 50
c. TCP 57

Did I miss something ?

Regards,
Leonard

> -----Original Message-----
> From: ext Henry Won [mailto:Henry.Won () jda com]
> Sent: Thursday, August 14, 2003 12:13 AM
> To: Ong Leonard (NBI/Singapore); security-basics () securityfocus com
> Subject: RE: Nortel Contivity VPN and Firewalls
>
>
> Assuming your clients are trying to connect to Contivity box
> outside the
> firewall, you probably need to map global ip to local ip for
> whomever trying
> to connect as well as allowing inbound ESP.
>
> Henry

---------------------------------------------------------------------------
----------------------------------------------------------------------------






---------------------------------------------------------------------------
----------------------------------------------------------------------------