Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco vpn client connect throught firewall and router

Status
Not open for further replies.

scienzia

Programmer
Joined
Feb 21, 2002
Messages
160
Location
IT
Hi,
I'm a real newbye using VPNs , so I'm sorry if I don't explain it properly.

I'm trying to connect to a VPN with Cisco VPN client.

If I connect to internet via dialup there is no problem.
If I try connecting throught my firewall (linux-iptables) and router Telindus ADSL Router, I have some problems...

The connection is OK, but I never receive any data.
I never get any
The connection is set to UDP.

How do I have to set my router and firewall to make it work?

Thanks in advance
 
The problem might be due to your client going out through a PAT address. You need to enable NAT Traversal (NAT-T) on the headend device. If you don't have access to the headend device then your only option is to assign a static public IP address to the client.
The problem is some NAT/PAT devices cannot handle the ESP protocol.
 
I have no access to the remote configuration, but I have total access to my router and firewall configuration.

For me it would be ok even to connect to the VPN always with the same pc inside my LAN (maybe setting the firewall routing would be easier).

If there is something I should check, please tell me.
 
If you don't have access to the headend device then your only option is to assign a public static ip address to the machine with the VPN client.
 
So you are telling me there is no way to use the firewall's static IP and forwarding(masquerading) all the traffic to/from the PC inside the LAN, is that right?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top