Is this possible

[mrn]

We have an external client that won't allow us to have a tunnel between our two companies. But they will allow us to access their network via the cisco vpn client. At present we have to use a machine in our DMZ to connect to them.

How would I go about allowing access via our internal network?



Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[ChrisAC]

Without having more information, install the VPN client on any machine that needs VPN access to this remote site.

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************

 

[ADB100]

I assume you want to know the ports that the Cisco VPN Client uses so you can enable these on your Firewall?

If so:

UDP 500 outbound and inbound
UDP 4500 outbound and inbound
UDP 10000 outbound and inbound

I have this configured on Microsoft ISA and my Cisco VPN client works fine through NAT etc with the above ports allowed through the firewall. ISA actually looks for the initial outbound connection on each port before allowing the subsequent replies through (Direction: Send Receive in ISA speak).

HTH

Andy