I am trying to connect to a remote site using the Cisco 3.5.1 VPN client. My users (Win 98, 2000, XP Pro) access the internet through a Microsoft Proxy Server 2.0 box. When I try to connect I get a Remote Peer is no longer responding error.
I also have RRAS installed on the same machine as Proxy Server. When I run a Microsoft VPN dialup session to my Proxy Server, then run the Cisco Client, I contact the security gateway, authenticate, then I see negotiating security policies, and Securing communication channel, and it stops right there.
VPN would work with PAT or NAT say using IPSec over TCP or IPSec over UDP, but it would not work with proxy firewalls as you would have invalid identities. If you look at your logs on the vpn concentrator head end with the debugs, you would probably get something like proxy identities not supported errors.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...