Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Security > General Security
Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

How to setup "Destination Port" range in "IP Security"

How to setup "Destination Port" range in "IP Security"

this thread has 17 replies and has been viewed 8392 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 20th November 2006, 14:20
thangnm thangnm is offline
Casual
Casual
 
 Join Date: Nov 2006
  6 month star 12 month star
 Posts: 16
 Reputation: thangnm is on a distinguished road (10)
Default How to setup "Destination Port" range in "IP Security"

I setup Rule in "IP Security Policies" (from secpol.msc )
With TCP protocol, I can setup for exact port, but I don't know how to setup rule for a range of ports, for example from port 21000 to port 21999
Please help me, thanks
  #2  
Old 20th November 2006, 22:20
JeremyW JeremyW is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Washington DC metro area
 Posts: 3,309
 Reputation: JeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of light (497)
Default Re: How to setup "Destination Port" range in "IP Security"

Here's link to instructions http://www.microsoft.com/technet/pro...o/ispstep.mspx

Mod, may want to move to General Security.
__________________
Regards,
Jeremy

Network Consultant/Engineer
Baltimore - Washington area and beyond
www.gma-cpa.com
  #3  
Old 20th November 2006, 22:41
m80arm's Avatar
m80arm m80arm is offline
Moderator
 
 Join Date: Apr 2005
  6 month star 12 month star
 Location: Newcastle, UK
 Posts: 2,633
  Send a message via MSN to m80arm Send a message via Skype™ to m80arm
 Reputation: m80arm is just really nicem80arm is just really nicem80arm is just really nicem80arm is just really nice (354)
Default Re: How to setup "Destination Port" range in "IP Security"

Quote:
Originally Posted by JeremyW View Post
Mod, may want to move to General Security.
Done!

Michael
__________________
Michael Armstrong
www.m80arm.co.uk
MCITP: EA, MCTS, MCSE 2003, MCSA 2003: Messaging, CCA, VCP 3.5, 4, 5, VCAP5-DCD, VCAP5-DCA, ITIL, MCP, PGP Certified Technician

** Remember to give credit where credit is due and leave reputation points To grant some reputation points to the user that helped you, just click on the little Yin-Yang icon on the right of the user's answer and follow the prompt. where appropriate **
  #4  
Old 21st November 2006, 10:36
thangnm thangnm is offline
Casual
Casual
 
 Join Date: Nov 2006
  6 month star 12 month star
 Posts: 16
 Reputation: thangnm is on a distinguished road (10)
Default Re: How to setup "Destination Port" range in "IP Security"

Thanks for answer, but may be we misunderstand
My question is as pictures follow
Attached Thumbnails
Click image for larger version

Name:	IPS port.JPG
Views:	260
Size:	25.1 KB
ID:	883   Click image for larger version

Name:	IPS port1.JPG
Views:	254
Size:	32.4 KB
ID:	884  
  #5  
Old 29th November 2006, 06:37
wullieb1 wullieb1 is offline
Moderator
 
 Join Date: Jul 2005
  6 month star 12 month star
 Location: Bris Vegas, Australia
 Posts: 6,384
 Reputation: wullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to behold (684)
Default Re: How to setup "Destination Port" range in "IP Security"

Quote:
Originally Posted by thangnm View Post
Thanks for answer, but may be we misunderstand
My question is as pictures follow
Have you actually looked at the picture you provided???

Click on the radial button To this port
  #6  
Old 29th November 2006, 06:51
JeremyW JeremyW is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Washington DC metro area
 Posts: 3,309
 Reputation: JeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of light (497)
Default Re: How to setup "Destination Port" range in "IP Security"

Quote:
Originally Posted by wullieb1 View Post
Have you actually looked at the picture you provided???

Click on the radial button To this port
Wullie, that's source and destination port, not range. I think he's trying to get firewall functionality out of IPSec policies... which I don't think is gonna happen.
__________________
Regards,
Jeremy

Network Consultant/Engineer
Baltimore - Washington area and beyond
www.gma-cpa.com

Last edited by wullieb1; 29th November 2006 at 07:25..
  #7  
Old 29th November 2006, 07:25
wullieb1 wullieb1 is offline
Moderator
 
 Join Date: Jul 2005
  6 month star 12 month star
 Location: Bris Vegas, Australia
 Posts: 6,384
 Reputation: wullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to behold (684)
Default Re: How to setup "Destination Port" range in "IP Security"

Quote:
Originally Posted by JeremyW View Post
Wullie, that's source and destination port, not range. I think he's trying to get firewall functionality out of IPSec policies... which I don't think is gonna happen.
Sorry about the edit. Clicked the wrong button.

I think i need to get back to reading the books. Can't rememebr the last time i even looked at ipsec
  #8  
Old 29th November 2006, 17:03
JeremyW JeremyW is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Washington DC metro area
 Posts: 3,309
 Reputation: JeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of light (497)
Default Re: How to setup "Destination Port" range in "IP Security"

Quote:
Originally Posted by wullieb1 View Post
Sorry about the edit. Clicked the wrong button.
I've done that a couple of times myself. No worries.
__________________
Regards,
Jeremy

Network Consultant/Engineer
Baltimore - Washington area and beyond
www.gma-cpa.com
  #9  
Old 5th December 2006, 09:48
thangnm thangnm is offline
Casual
Casual
 
 Join Date: Nov 2006
  6 month star 12 month star
 Posts: 16
 Reputation: thangnm is on a distinguished road (10)
Default Re: How to setup "Destination Port" range in "IP Security"

So is it impossible with IPSec?
  #10  
Old 5th December 2006, 16:13
JeremyW JeremyW is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Washington DC metro area
 Posts: 3,309
 Reputation: JeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of lightJeremyW is a glorious beacon of light (497)
Default Re: How to setup "Destination Port" range in "IP Security"

I'll try and find some time to go through my books at home but it would helpful if I knew what you're trying to accomplish.
__________________
Regards,
Jeremy

Network Consultant/Engineer
Baltimore - Washington area and beyond
www.gma-cpa.com
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
I get "[F1] for setup, [F2] to load default settings." And the Keyboard is dead. Michael! Misc 3 12th October 2006 19:29
Server 2003 TS: can I change "device" to "user" licenses? Ossian Terminal Services 3 29th September 2006 20:55
"NTLDR is Compressed" "NTLDR is Missing" "forgot my password" kenja Windows 2000 Pro, XP Pro 7 22nd March 2006 21:03
How to set security to an "Stand Alone" PC ? sco1984 Windows 2000 Pro, XP Pro 2 7th April 2005 11:33
No "SETUP.EXE" on Office XP Pro CD-ROM GISJack Windows Server 2000 / 2003 2 3rd May 2004 11:23


All times are GMT +3. The time now is 21:11.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri