IPsec and NAT

[bas95]

Hello,

Running Cisco 515 as VPN server device, use radius as authentication server, use Cisco VPN client 3.51 on the client.

Is it possible to start a VPN connection behind a NAT router using IPsec as protocol.???

Any advice will be helpfull..?

Regards,

Bastiaan van Utrecht

 

[yizhar]

HI.

VPN to the pix can work behind dynamic or static NAT but will fail behind PAT, or behind any device that will not forward ESP (IP protocol 50) to the client.

The best way to verify is to try.

For support of clients behind PAT, you can use other VPN server devices such as Cisco VPN 3xxxx (IPSec over TCP/UDP), MS W2K server (PPTP), or one of many many other solutions.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar