VPN through Soho71 to a Pix

[skleber]

Hi,

a office of our Company has a DSL Connection with a Soho 71 Router. It is no Problem for one Client to open a VPN Connection (Cisco VPN Client) to a Pix Firewall through the Soho Router. But if anouther Client from the office wants to connect at the same time, both connections are down. They cannot send any data through the Tunnel.

Thanks for Help.

Sebastian

[afakhan]

Hi,

Problem is bcoz your SOHO71 router is doing PAT, and that breaks IPSec, and bcoz when 3nd client requests UDP500, it bounces off the first one.

Configure your pix fw (make sure that you have V6.3.1 on it) with this command:

pix(config)# isakmp nat-t

and then configure client to use NAT Transparency (IPSec/UDP).

Thx

Afaq