IPSEC Parameters

GE VPN Device Cisco 7120 Router Secure Tunnel

GE IPSec Peer 208.51.30.227, .230, .231
GE Encryption Domain 150.2.0.0 255.255.0.0
Pre-shared secret key Given on the phone GE Medical Internet Customer
Key Algorithm ISAKMP (UDP 500)
ISAKMP Auth Mode Pre-shared Secret
ISAMP Hash MD5
ISAKMP Encryption 3DES CBC
ISAKMP Diffie-Hellman Group 2
ISAKMP Key Lifetime 86,400 Sec (24 hrs)
ISAKMP Key Mode main
Perfect Forward Secrecy Off
IPSec Encapsulation Tunnel Mode 208.51.30.2xx Cust VPN Peer Address Cust
150.2.0.0 / 16
IPSec Protocol Type ESP (IP Protocol 50) Scanner
IPSec Cipher Algorithm 3DES
Network
IPSec Authentication HMAC-MD5
IPSec Lifetime 3600 seconds (1 hr)

GE Ports and Protocols GE Healthcare VPN Connectivity

Inbound to Customer
ping echo & echo reply (ICMP Type 0 Bandwidth Requirements
and 8) Sessions are typically less than 100KB and require approximately 128kbit/sec.
FTP TCP 21
SSH TCP 22
Infrequently, larger scanner images are transferred for maintenance purposes; this may
telnet TCP 23 consume more bandwidth.
HTTP TCP 80, 8080, 8001-8003
DICOM TCP 104
Network Address Translation
SNMP UDP 161 NAT is not needed under normal circumstances. NAT may be required on the customer
Timbuktu [Workstation] UDP 407, TCP 407 end when customer scanner IP address(es) conflict with the addressing of another GEHC
SSL TCP 443 customer.
MS SQL Server [Web, TCP 1433-1434
Archive] Inbound to Customer (cont) Outbound from Customer
VNC TCP 5800-5809, 5900-5909 pcAnywhere [Broker] TCP 5631, UDP 5632 ping echo & echo reply
SSL Test Servers 4431 - 4433 (ICMP Type 0 and 8)
Insight Manager TCP 2301, 2381 5.0.2 RIS Servers TCP 5500, 5501, 5502, FTP TCP 20
MS Terminal Server TCP 3389 5509
[Web, Archive] 5.0.2 RIS Test Servers TCP 5510, 5519 HTTP TCP 80
PACS cluster GUI TCP 8181, 14141 Oracle [RIS] TCP 1161-1162, 1521, SNMP UDP 162
Exam Manager TCP 8084, 8086, 8088, 32000- 1526, 1748, 1754, 1808-
33000 1809, 7772-7773
Sybase [PACS] TCP 20000 PrServers [RIS] TCP 5700, 5701, 5702, Monitor TCP 8084
Virtual Media TCP 17988 5709, 5800, 5809, 5900,
5909, 6001, 6009
Fax Server [RIS] TCP 6500 pcAnywhere [Broker] TCP 65301, UDP 22

GEHC-IIS VPN Parameters & Protocols 11/1/2006 2:32 PM