Port 4500 (IPsec NAT-T) — check if it's open

Port 4500 — IPsec NAT-T. IPsec NAT traversal (UDP).

1) Make sure the app listens on 0.0.0.0, not 127.0.0.1. 2) Allow the port in your firewall (Windows Defender Firewall inbound rule; Linux: ufw allow 4500). 3) Forward the port on your router to your computer's LAN IP. 4) Make sure you have a public (non-CGNAT) IP. 5) Verify it here.

Only open it if the service must be reachable from the internet, keep the software patched and use strong authentication. Put databases, SMB, RDP and admin panels behind a VPN.