How to configure USG FLex 100 to allow clients to use outbound NordVPN?

tesagig · November 29

My USG Flex 100 is blocking NordVPN (outbound) for clients on my network.

Is there a common VPN out guide that applies to NordVPN?

PeterUK · November 29

You can't get should VPN to work with USG

tesagig · November 29

BTW. If I allow all outbound traffic then the VPN works. But I want to be more surgical on what ports to open.

PeterUK · November 29

I read your post wrong was thinking you wanted to run the VPN on USG

not sure what ports are needed for NordVPN but likely not inbound

it depends on the protocol used so might be UDP 500 and 4500 with protocol 50 (but unlikely if behind NAT)

or NordVPN goes by TCP or UDP on random ports so check with Wireshark you might be able to do a wildcard fqdn and allow it that way

tesagig · November 29

thanks. Yes, it works with no inbound ports.

What I have seen form the USG log is that it even uses ports in the 50000 range. For example 51820. This seems strange for a VPN?

In fact if I open udp 51820, VPN connects. But I feel this is random

PeterUK · November 29

If you can do this

The ports will be more fixed

the following port for OpenVPN

tesagig · November 29

I had 1194 and 443 already open. But only opening 51920 made it connect

PeterUK · November 29

As long as its not random or tell the client to be random then ok

All Replies