VPN through Cisco 1700

[999Dom999]

Is this possible, client 2 site VPN

W2k client - C1700 - Internet - C1700

I need the VPN to pass through the first cisco router which is connected to the internet with isdn.

Thanks 4 any help,

Dom

 

[CiscoGod]

By Win2K vpn what do you mean? Need more info. DO you have the Cisco vpn client installed on the Win2k client to terminate to the C1700 (best choice).

Let me, I can help you out with any of your VPN issues.

CiscoGod

 

[netmediasystems]

You have two sites with 1700's at each location? If this is the cast you can either do a router to router VPN, or set up "dynamap" VPN at one point and use the VPN client software to connect. To use the VPN client you must have at least 12.2.8T* on the router to use the dynamap feature. If you are going to be working remotely at one site all the time, you might as well use the router to router method. This would be good in a situation from one office to another where the location isnt changing. The VPN client software is design for the situations where you are traveling from location to location and still need access to one point. It is also cheaper than having a 2nd router as well. With the router to router situation, you can put the whole LAN on the VPN connection, whereas the VPn client requires the software on each workstation. Just a thought.

brian

 

[999Dom999]

OK basically I need to connect to various sites using the VPN client software that comes with windows 2000. If I was to connect to the internet via a modem then I can use the client software to connect to the various sites I need which works ok but I want to use the internet connection via our router. Its the router in the middle that is causing the problem, I would like the vpn traffic to pass through that router. I am not always connecting to sites with a cisco router, sometimes its just win2000 running a vpn server. Does this help? Thanks for any suggestions

 

[CiscoGod]

You need an IOS that supports VPN pass-thru when using NAT. This is not available to all IOS's, if you do a:

show debug ip nat

You see a NAT failure everytime a IPSEC packet tries to make it pass the router.

You can look for an IOS that supports this thru their IOS search online tool.


Cisco_God