RE: Nortel Contivity VPN and Firewalls

[<Leonard.Ong () nokia com>]

Hello All,

Thanks for your inputs on allowing Nortel VPN. Basically the simplified version would be :

Host in Extranet -> Firewall -> Internet -> Nortel VPN Gateway

Now, we need to have a correct ports open on Firewall.  From the inputs I've received so far :
a. UDP 500
b. IP Protocol 50
c. TCP 57

Did I miss something ?

Regards,
Leonard

> -----Original Message-----
> From: ext Henry Won [mailto:Henry.Won () jda com]
> Sent: Thursday, August 14, 2003 12:13 AM
> To: Ong Leonard (NBI/Singapore); security-basics () securityfocus com
> Subject: RE: Nortel Contivity VPN and Firewalls
>
>
> Assuming your clients are trying to connect to Contivity box 
> outside the
> firewall, you probably need to map global ip to local ip for 
> whomever trying
> to connect as well as allowing inbound ESP.
>
> Henry

---------------------------------------------------------------------------
----------------------------------------------------------------------------