Re: different ipsec inbound sessions thru nat
- From: "dt1649651@xxxxxxxxx" <dt1649651@xxxxxxxxx>
- Date: 7 Jul 2005 05:41:51 -0700
Uli Link wrote:
> > My office has a 2811 acting as a Ipsec VPN gateway for roaming users.
> >
> > My home has a Linksys router with NAT. I can not make more than one
> > concurrent VPN connection ( via VPN Client 4.6 ) to my office. Only one
> > PC at a time can make the connection.
> >
> > Any advice is greatly appreciated.
>
> With IPsec you cannot have more than one IKE SA between a pair of two IP
> addresses. The translated WAN IP of your router is one IP, the WAN IP
> of your office VPN gateway the other.
>
> A router with multi-user VPN passthrough should be able to handle
> different IPsec/L2TP/PPTP connections to different destinations.
> Don't know if the Linksys can do multiuser VPN passthrough.
>
> You have to check NAT-Traversal in VPN Client's configuration.
I think the problem is some settings in my office router ( I set it :-)
)
>>From home, I can make two concurrent ipsec vpn connections to a
customer that uses VPN 3000 concentrator. This shows that the home
router is fine for this scenario.
On the VPN client on my two PCs at home, I do have a check on the
NAT-Traversal.
When I turn on the debug for crypto isakmp, I see the router reply with
UPD packets port 4500 but then the 2nd connection never completes.
DT
.
- Follow-Ups:
- Re: different ipsec inbound sessions thru nat
- From: dt1649651@xxxxxxxxx
- Re: different ipsec inbound sessions thru nat
- References:
- different ipsec inbound sessions thru nat
- From: dt1649651@xxxxxxxxx
- Re: different ipsec inbound sessions thru nat
- From: Uli Link
- different ipsec inbound sessions thru nat
- Prev by Date: Re: Two inputs into one router?
- Next by Date: Re: Citrix MetaFrame / Cisco Router issues
- Previous by thread: Re: different ipsec inbound sessions thru nat
- Next by thread: Re: different ipsec inbound sessions thru nat
- Index(es):
Relevant Pages
|