Setting up FVS318 to FVS318 VPN tunnel behind another router

Hello!

Got a simple question regarding setting VPN tunnels between two FVS318s Netgear VPN firewall routers.

I will be setting up two FVS318 routers via a VPN tunnel to one another.  I have done it numerous times successfully, providing both FVS318s have a public IP address and all (DMZ) ports available to it.  

In this case, one of the FVS318s will be behind another NAT 3rd party router (router B) issuing it an internal (192.X.X.X) address.  

I just need to know which port(s) must be forwarded on router B in order for the two FVS318's to communicate.   I have done this before in the past, and I am sure its 1 TCP port (maybe TCP 1723?).  Can anyone confirm?
LVL 1
MountainTechGuyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dpk_walCommented:
As you wish to have site-site IPSec VPN tunnel between two routers, you need to open following ports on router B:

UDP 500 -- For IKE
UDP 4500 -- For NAT-T
Protocol 50/51 --- Please note these are not port numbers but protocol numbers for ESP/AH
                             (respectively); these are not TCP or UDP but IP protocol numbers.

Please note you need to open UDP4500 only if routerB support NAT-T; which I think you would need to use as one of the FVS router is behind NAT device.

Thank you.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Rob WilliamsCommented:
Perhaps there are other methods, but I have only ever seen this work if the Netgear/VPN router is placed in the DMZ zone.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.