NAT-T alternative

gautamzone · ‎09-04-2007

Hi friends,

There is a Nortel VPN client using RSA SecureID authentication to connect to the server.

Since the VPN clients are behind a PAT device viz. ASA firewall, we have told the VPN headend IT staff to add NAT-Traversal on their VPN server.

But they are refusing to accept our request and say that think of an alternative.

Is there any other way for VPN clients to connect to the VPN gateway without NAT traversal. We can't use static IP's for all these clients as there are 60 clients and getting public IP's is expensive.

Thanks a lot

Gautam

acomiskey · ‎09-04-2007

You've already listed the other alternative.

gautamzone · ‎09-04-2007

Hi,

But getting static IP's also is not acceptable as there is a block of just 8 public IP's available and the usable addresses are just 6. The clients are around 60.

Is there any other solution like some machine being a VPN proxy or something to that effect.

Thanks a lot

Gautam