[vpn-help] All IPSec SA proposals found unacceptable!

Matthew Grooms mgrooms at shrew.net
Sun Feb 21 23:54:02 CST 2010


On 2/19/2010 1:00 AM, Robert L Sowders wrote:
>
> Thanks Matthew,
>
> So is what protocol is NAT-T?
>
> Pardon my ig.
>
> BTW, got my firewall people to open UDP ports 4500 and 10000 and my
> shrew vpn client works now. Thanks for the tip.
>

NAT-T is the RFC standard for encapsulation of IPsec ESP in UDP. It 
communicates over port 4500 by default ...

http://www.ietf.org/rfc/rfc3947.txt
http://www.ietf.org/rfc/rfc3948.txt

-Matthew



More information about the vpn-help mailing list