Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAT-T alternative

Hi friends,

There is a Nortel VPN client using RSA SecureID authentication to connect to the server.

Since the VPN clients are behind a PAT device viz. ASA firewall, we have told the VPN headend IT staff to add NAT-Traversal on their VPN server.

But they are refusing to accept our request and say that think of an alternative.

Is there any other way for VPN clients to connect to the VPN gateway without NAT traversal. We can't use static IP's for all these clients as there are 60 clients and getting public IP's is expensive.

Thanks a lot

Gautam

  • Firewalling
2 REPLIES
Green

Re: NAT-T alternative

You've already listed the other alternative.

New Member

Re: NAT-T alternative

Hi,

But getting static IP's also is not acceptable as there is a block of just 8 public IP's available and the usable addresses are just 6. The clients are around 60.

Is there any other solution like some machine being a VPN proxy or something to that effect.

Thanks a lot

Gautam

149
Views
0
Helpful
2
Replies