VPN IPSEC Wizard

[droktor]

Hi guys, just a simple question :

My Fortigate 90D,  under VPN Creation Wizard, STEP 2 , when asking for IP Address, it wouldn't let me input a port as we are using xxx.xxx.xxx.xxx:444

Is there a way to add a port to this IP address

Thanks in advance

[Mohamed_Gaber]

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/33578/configurable-ike-port

To set the IKE port:
config system settings
set ike-port 6000
end

[alif]

This option is only available on FortiOS 7.0 version.

Fortigate-90D can't be upgraded to FortiOS 6.2 or later versions.

[droktor]

I am on version 6.0.15

[ede_pfau]

I think you mix up IPsec VPN and SSLVPN. The custom port looks like you want to use it with SSLVPN.

Yes, in FortiOS v7.0, there is a new option to use a custom port for the IKE and IPsec protocols when using NAT (default: ike/500, ipsec/4500). Both protocols will use the custom port. This might help if IPsec standard ports are blacklisted by the ISP, but if there is censorship, it will use whitelisting and thus port relocation won't help at all.

If you go this way, check that the VPN client can use the custom port.

[droktor]

Thank you, well not actually a mix up, just need to connect my 90D as a client of a cisco vpn but company uses port 444 which does not allow me to input on configuration :(

90D SSLVPN server works like a charm from an outside to my home.

[ede_pfau · Accepted solution]

Well, then you're out of luck. Shifting the IKE/IPsec port is IMHO quite uncommon, and a very new feature for FortiOS as well.

IF you had a newer FGT then I would point out to you that in recent FortiOS an SSLVPN client was included, so you could do site-to-site SSLVPN...but I won't.