• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 478
  • Last Modified:

Nortel vpn and reflexive ACL

I've never used Nortel vpn, but have some familiarity with Cisco vpn.  I need to make sure that a visitor on Friday will be able to use Nortel vpn from my office to remote desktop to a computer in his office.   While I'm not concerned with connectivity at the other end, I want to make sure I have the necessary ports open at my end.   Does all traffic over the Nortel vpn use the same port or does port usage follow standard protocol/port mappings?  If Nortel is over 500 udp (both ends), does port 3389 need to be opened for RDP?  Are there any other ports that need to be opened?   Thanks.
0
cathyn
Asked:
cathyn
  • 2
  • 2
1 Solution
 
dpk_walCommented:
I do not think you would need to open any specific ports for Nortel VPN as long as other VPN clients work when behind your network; in principle all IPSec VPN implementations use UDP 500 for IKE and protocol 50/51 for ESP/AH; further they might also use UDP 4500 for NAT-traversal.
If the data would be encrypted over the VPN tunnel and then sent to the internet then you need not open port 3389; in any case; if you have all ports or all commonly used ports allowed from inside to outside then you would not have any problem at all.
You firewall if is stateful would take care of the traffic which comes back as response of the traffic which has gone out.

Thank you.
0
 
cathynAuthor Commented:
The Cisco vpn works, so sounds like Nortel should as well.   Thanks for verifying that the traffic stays within the vpn tunnel.  
0
 
dpk_walCommented:
You are welcome; please update the post if you need more details.

Thank you.
0
 
cathynAuthor Commented:
Test performed as expected!  Thanks!
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now