NAT-T alternative

Unanswered Question
Sep 4th, 2007
User Badges:

Hi friends,

There is a Nortel VPN client using RSA SecureID authentication to connect to the server.

Since the VPN clients are behind a PAT device viz. ASA firewall, we have told the VPN headend IT staff to add NAT-Traversal on their VPN server.

But they are refusing to accept our request and say that think of an alternative.

Is there any other way for VPN clients to connect to the VPN gateway without NAT traversal. We can't use static IP's for all these clients as there are 60 clients and getting public IP's is expensive.

Thanks a lot


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
acomiskey Tue, 09/04/2007 - 11:44
User Badges:
  • Green, 3000 points or more

You've already listed the other alternative.

gautamzone Tue, 09/04/2007 - 12:14
User Badges:


But getting static IP's also is not acceptable as there is a block of just 8 public IP's available and the usable addresses are just 6. The clients are around 60.

Is there any other solution like some machine being a VPN proxy or something to that effect.

Thanks a lot



This Discussion