Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Static NAT statements for GRE

We have a 1720 router connected to the Internet via ISDN (BRI). The router performs dynamic NAT between outside "public" addresses and inside "private" addresses. We have a Win2k server on the LAN side of the router to which we need to connect clients on the Internet using VPN ie, the Win2k will act as a VPN server. How do we configure static NAT statements on the router to allow PPTP / GRE packets addressed to an outside "public" address to be directed to the internal "private" address of the VPN server ??

New Member

Re: Static NAT statements for GRE

It sounds like you have two issues. If your Win2K server is located on a flat network and only clients are connecting to the box you will not need GRE if is is just IP. If you do need something other than IP you will need to put the VPN encryption in front of the GRE tunnel. In that case you can not terminate the VPN on the WIN2K box that you want to access. GRE and VPN technology go hand in hand however they are very different. Also you need to have a dedicated static NAT or port redirection for your inbound traffic. That is the short version.

I do not know your whole system however, you might want to use the Cisco VPN client to the 1720 instead. The Cisco VPN client has been the least painful VPN experience I have had and with ver 3.5 it's much easier on the user.

CreatePlease to create content