Netgear FVS318 and ActionTec 701-wg

Archived from groups: comp.dcom.vpn (More info?)

I am trying to figure which ports to open on the actiontec modem to allow
vpn passthru. My modem is running Qwest firmware and doesn't have a radio
button to turn vpn passthru on. And does anyone know on the Netgear FVS318
can two of them establish a vpn connection if one is running firmware 2.3
and the other 2.4

Thanks

Archived from groups: comp.dcom.vpn (More info?)

also,

I was looking for the same information and found loads of different answers
on google, etc. These are some notes I made at the time.

Netgear tech support:
ports 1723 and 500.

Newsgroups:
1723 for PPTP
500 - IPSec ?
50
51 for IPSec.

groups.google
port UDP 500 if using key neg (IPSec?)
port UDP 1723 for PPTP

Protocol 50 ESP (not port number, but protocol)
Protocol 51 AH?

PPTP: use port 1723 and GRE protocol 47 (Generic Routing Ecapsulation
protocol)
L2TP: ports 1701 and port 500

then my notes say: "check some books".

I've got both of mine in the 'DMZ' (i.e. all ports are open and all packets
are forwarded to the FVS318 now).

I actually have 3 sites with these units and find that even thought all
ports are open on all sites and all the sites' FVS318's report a fully
established connection that 1 of the sites does not work properly - e.g.
network browse and ping don't work - actually nothing that you'd like to do
over a network actually works with this site (in either direction). Some
packet sniffers at various points on the way indicated a problem with an
intervening corporate ISP provider mangling the encrypted VPN packets - e.g.
modifying the source or destination IP address and sending the modified
packet on, but then sending on the original as well - stuff like that. They
currently have their firewall vendor looking into the problem - so things
can screw up in realms outside of your control.

"Steve" <mcp5@qwest.net> wrote in message
news:MwL1d.44$l_4.63959@news.uswest.net...
> I am trying to figure which ports to open on the actiontec modem to allow
> vpn passthru. My modem is running Qwest firmware and doesn't have a radio
> button to turn vpn passthru on. And does anyone know on the Netgear
FVS318
> can two of them establish a vpn connection if one is running firmware 2.3
> and the other 2.4
>
> Thanks
>
>

Archived from groups: comp.dcom.vpn (More info?)

yes.

"Steve" <mcp5@qwest.net> wrote in message
news:AP42d.30$Mi.55172@news.uswest.net...
> Are you running netgear firmware 2.4 on all three routers?
>
> "Joe" <ffffh.no.spam@hotmail-spammers-paradise.com> wrote in message
> news:ci9734$uk6$1@newsg2.svr.pol.co.uk...
> > also,
> >
> > I was looking for the same information and found loads of different
> answers
> > on google, etc. These are some notes I made at the time.
> >
> > Netgear tech support:
> > ports 1723 and 500.
> >
> > Newsgroups:
> > 1723 for PPTP
> > 500 - IPSec ?
> > 50
> > 51 for IPSec.
> >
> > groups.google
> > port UDP 500 if using key neg (IPSec?)
> > port UDP 1723 for PPTP
> >
> > Protocol 50 ESP (not port number, but protocol)
> > Protocol 51 AH?
> >
> > PPTP: use port 1723 and GRE protocol 47 (Generic Routing Ecapsulation
> > protocol)
> > L2TP: ports 1701 and port 500
> >
> > then my notes say: "check some books".
> >
> > I've got both of mine in the 'DMZ' (i.e. all ports are open and all
> packets
> > are forwarded to the FVS318 now).
> >
> > I actually have 3 sites with these units and find that even thought all
> > ports are open on all sites and all the sites' FVS318's report a fully
> > established connection that 1 of the sites does not work properly - e.g.
> > network browse and ping don't work - actually nothing that you'd like to
> do
> > over a network actually works with this site (in either direction).
Some
> > packet sniffers at various points on the way indicated a problem with an
> > intervening corporate ISP provider mangling the encrypted VPN packets -
> e.g.
> > modifying the source or destination IP address and sending the modified
> > packet on, but then sending on the original as well - stuff like that.
> They
> > currently have their firewall vendor looking into the problem - so
things
> > can screw up in realms outside of your control.
> >
> > "Steve" <mcp5@qwest.net> wrote in message
> > news:MwL1d.44$l_4.63959@news.uswest.net...
> > > I am trying to figure which ports to open on the actiontec modem to
> allow
> > > vpn passthru. My modem is running Qwest firmware and doesn't have a
> radio
> > > button to turn vpn passthru on. And does anyone know on the Netgear
> > FVS318
> > > can two of them establish a vpn connection if one is running firmware
> 2.3
> > > and the other 2.4
> > >
> > > Thanks
> > >
> > >
> >
> >
>
>
>
>