Changing IPsec VPN Ports

[mohkhalifa]

Dear all,
there is a way to change the IPsec ports (500 and 4500) ? Because my ISP is blocking this ports.
Please Advise!

[NogBadTheBad]

Use OpenVPN, you can define the server port.

[mohkhalifa]

@NogBadTheBad OpenVPN site to site has many problem and very long troubleshooting instructions to do MTU, mmfix, ping delay, packet loss ..... etc
That’s why want to switch to IPsec

[NogBadTheBad]

You can't change the IPSec ports.

[Konstanti]

@NogBadTheBad said in Changing IPsec VPN Ports:

IPSec ports

Why? This is theoretically possible.

https://wiki.strongswan.org/projects/strongswan/wiki/StrongswanConf

charon.port	500	UDP port used locally. If set to 0 a random port will be allocated.
charon.port_nat_t	4500	UDP port used locally in case of NAT-T. If set to 0 a random port will be allocated. Has to be different from charon.port, otherwise a random port will be allocated.

[NogBadTheBad]

@Konstanti

If you want to go ahead hacking the code about feel free, it will break when pfSense is updated.

Much easier to run OpenVPN.

@MOHKHALIFA

Maybe run IPSec over a GRE / GIF Tunnel.

[mohkhalifa]

Thanks all for your kind replies appreciated