I have a VPN Concentrator behind my Cisco 2621xm router. The public interface ip on my concentrator is 10.100.1.2 I can connect using the cisco VPN client when I issue my computer a 10.100.1.X ip address in the same subnet as the concentrator public interface ip however I cannot connect to my concentrator when I am on the public internet. The outside interface IP for the router is 24.99.x.x the inside interface ip for the router is 10.100.1.1 which this interface is plugged into the same switch as my Concentrator public interface. What ports do I need open to forward the traffic from my outside 24.99.x.x address from the internet to the 10.100.1.2 address for the VPN Concetrator to allow my client software to connect to the concentrator. Do I need to configure some kind of nat address on the router to make this work?