VPN via 3G Data Card

patricia20 · ‎01-24-2009

Hi,

We have a customer whose Cisco1841 is configured with remote-access VPN. Unfortunately, they're having an issue with some of their UK based staff while trying to connect when roaming via a 3G data card. The telecom provider is Vodafone. The customer did some research and found this link:

http://www.3g.co.uk/3GForum/showpost.php?p=275093&postcount=6

Is there a special configuration needed for this kind of VPN connection?

Thanks,

Patricia

Jon Marshall · ‎01-26-2009

Patricia

This may or may not be of any use and you may have already set this up on the 1841 but Vodafone with 3G require that the end device support NAT-Traversal because they PAT all the traffic in their 3G cloud. From memory i believe it is UDP port 4500 you need to enable on the 1841.

Jon

patricia20 · ‎01-26-2009

Hi Jon,

Thanks for this. Can you show me how to configure this nat-t on 1841? Cause when I checked from the CLI, I didn't find a nat-traversal option. How do I enable the UDP port from the router?

Also, we've tried using the latest version of VPN client and it seems to be working now. :)

Thanks,

Patricia

patricia20 · ‎01-28-2009

Hi Jon,

Disregard my previous email re how to enable port UDP 4500 as when I checked, I've enabled IP so this shouldn't be a problem. Anyway, another question is, when I tried to connect to the customer's VPN using our internet here in the office, the transparent tunneling in the VPN status says Active on UDP 4500. But when I tried connecting to the VPN via Vodafone vodem, the transparent tunneling still shows inactive. Would you know the explanation for this?

Thanks,

Patricia

syamsulhusni · ‎02-01-2009

Hi Patricia,

It seems that the Cisco1841 is security bundle router which is preloaded with security IOS (firewall functionality). Based on the posting on the link above, the router need to be enabled NAT TRAVERSAL for stable VPN client connection over the 3G network.

syamsulhusni · ‎02-01-2009

Patricia,

Sorry, disregard my previous post.

patricia20 · ‎02-02-2009

No worries, thanks for replying though. :)