topic Re: Fabric Extend behind Firewall in ExtremeSwitching (VSP/Fabric Engine)

Fabric Extend behind Firewall

Configterminal — Wed, 28 Feb 2024 11:17:55 GMT

Hi, I am going to be setting up fabric extend using a pair of XA1480s. The headend switch will be in a data center behind a firewall. The other, at a remote location plugged directly into the internet circuit.

For the DC side, I am planning on creating a DNAT rule on the firewall to allow inbound connectivity from the internet. My question is, is there a KB that indicates what ports are needed to be allowed to get the tunnel up? Is it just IPSEC?

thanks

Re: Fabric Extend behind Firewall

EF — Wed, 28 Feb 2024 20:02:43 GMT

Hi,

I belive only UDP 4500 is needed:

source "VOSS User Guide (extremenetworks.com)"

Best!!!

Re: Fabric Extend behind Firewall

Configterminal — Wed, 28 Feb 2024 23:44:00 GMT

This is perfect thank you sir!