Port ESP IP protocol 50 test failed

FishMan
Comes here often

Port ESP IP protocol 50 test failed

i have a juniper VPN need to install, a testing tool to test for

 

1. Port UDP/IKE 500: OK

2. Port UDP/NAT-T 4500: OK

3. Port ESP IP protocol 50: FAILED

 

can someone help why port ESP IP protocol 50: FAILED and how to fixed

 

Regards

7 Replies 7
KarstenI
Kind of a big deal
Kind of a big deal

Is your VPN gateway behind a NAT or PAT gateway? Then you don't need IP/50. And with PAT it typically can't be forwarded as there are no ports to translate.

FishMan
Comes here often

Thanks Karstenl

 

currently i use port forwarding

 

but they need to make sure that all testing ok with no failed, how could I get this done

 

Regards

KarstenI
Kind of a big deal
Kind of a big deal

Then you probably have to configure a 1:1 NAT with a free IP and forward all traffic. 

FishMan
Comes here often

Hi Karsrenl

 

can you guide how to do 1:1NAT

 

Regards

KarstenI
Kind of a big deal
Kind of a big deal

FishMan
Comes here often

i am looking forward on how to allow /16 range to one private ip address using 1:1NAT

 

Regards

KarstenI
Kind of a big deal
Kind of a big deal

Where does this /16 come from? If you have one VPN gateway you need one IP address.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.