cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
577
Views
0
Helpful
1
Replies

3rd party VPN client within a VPN network

8dgoswick
Level 1
Level 1

We are doing router to router VPN using the 2620. For Internet access, the users simply go out the same router using NAT.

We have an application that runs a VPN client on a workstation and connects using IPSec. This workstation sits behind the NAT router. The returning packets (UDP, port 500) are not making it back into the workstation. I imagine is has something to do with the router to router VPN setup. Is there any way to pass those packets back into the private network? This works just using NAT, but not when the VPN tunnels are set up.

1 Reply 1

smahbub
Level 6
Level 6

It should be dependant on the rules of your crypto-map access list or your firewall rules. Exclude that workstation from the crypto map and make sure the firewall isn’t discarding those return packets.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: