Added a hint for firewall rules

readme: added a hint for firewall rules in backend documentation (IPsec backend) Could help users to use this backend without problems.
flannel-io · Jun 7, 2020 · 9374813 · 9374813
1 parent 4856497
commit 9374813
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Documentation/backends.md b/Documentation/backends.md
@@ -135,6 +135,9 @@ Type:
 * `UDPEncap` (Boolean): Optional, defaults to false. Forces the use UDP encapsulation of packets which can help with some NAT gateways.
 * `ESPProposal` (string): Optional, defaults to `aes128gcm16-sha256-prfsha256-ecp256`. Change this string to choose another ESP Proposal.
 
+Hint: 
+Add rules to your firewall: Open ports 50 (for ESP protocol), UDP 500 (for IKE, to manage encryption keys) and UDP 4500 (for IPSEC NAT-Traversal mode).
+
 #### Troubleshooting
 Logging
 * When flannel is run from a container, the Strongswan tools are installed. `swanctl` can be used for interacting with the charon and it provides a logs command..