WARNING: This site is intended for online use only; mass-downloading of pages degrades the server and is prohibited.
If you attempt to use tools to mass-download the site, you may be blocked permanently by automated software.
If you want to read this CertiGuide offline, please use one of the links on the left to purchase a convenient PDF copy. Thank you.

Read this whole guide offline with no ads, for a low price!
Click Here!
Use coupon code "certiguide" to save 20%!
(Expires 2004/12/31)

Test yourself better with 300 extra Security+ questions!
Get It Here!

Google
Web CertiGuide






Table Of Contents  CertiGuide to Security+
 9  Chapter 2:  Communication Security (Domain 2.0; 20%)
      9  2.1  Remote Access
           9  2.1.7  IPSEC

Previous Topic/Section
IPSec versus DoS Attacks
Previous Page
Pages in Current Topic/Section
1
Next Page
 2.1.8  Vulnerabilities
Next Topic/Section

IPSec Interoperability

One thing to be aware of when using IPSec is that interoperability among different vendors’ implementations of the protocols is an on-going effort. As more and more standards are finalized, successful interoperability is becoming more the rule than the exception. But this is not always the case, particularly if you are integrating new hardware or software into an existing “IPSec” based network, test the new equipment on your network to make sure that it works well with your existing configuration.

IPSec uses TCP port 1293 and UDP port 1293.

IPSec Ports

IPSec protocol and port number information, to keep in mind if you are running IPSec across a router boundary:

IPSec uses TCP port 1293 and UDP port 1293.

ISAKMP uses UDP port 500 (sometimes UDP port 4500 when NAT is used).

Internet Assigned Numbers Authority has assigned Protocol Number 50 to ESP163 (RFC2406). And Protocol Number 51 for AH (Authentication Header for IPv6)164( RFC2402).

ESP uses IP protocol number 50

AH uses IP protocol number 51..



 __________________

163. http://www.protocols.com/pbook/tcpip3.htm

164. http://www.iana.org/assignments/protocol-numbers

Previous Topic/Section
IPSec versus DoS Attacks
Previous Page
Pages in Current Topic/Section
1
Next Page
 2.1.8  Vulnerabilities
Next Topic/Section

If you find CertiGuide.com useful, please consider making a small Paypal donation to help the site, using one of the buttons below. You can also donate a custom amount using the far right button (not less than $1 please, or PayPal gets most/all of your money!) In lieu of a larger donation, you may wish to consider buying an inexpensive PDF equivalent of the CertiGuide to Security+ from StudyExam4Less.com. (Use coupon code "certiguide" by December 31, 2004 to save 20%!) Thanks for your support!
Donate $2
Donate $5
Donate $10
Donate $20
Donate $30
Donate: $


Home - Table Of Contents - Contact Us

CertiGuide for Security+ (http://www.CertiGuide.com/secplus/) on CertiGuide.com
Version 1.0 - Version Date: November 15, 2004

Adapted with permission from a work created by Tcat Houser et al.
CertiGuide.com Version © Copyright 2004 Charles M. Kozierok. All Rights Reserved.
Not responsible for any loss resulting from the use of this site.