WebVPN on 3005

[ccie]

I have a 3005 Concentrator on which I'm running WebVPN services. I have a 827 DSL router in front of it, and everything works fine for remote users. I need to have a server sitting on the LAN behind it browse through it for Internet access. I set the server's default gateway to the LAN IP of the 3005, and I set the default gateway of the 3005 to the outside router's Eth0 IP. I get no Internet access.

Can anyone shed some light on this situation? Are 3005 Concentrators designed to be used in this fashion? Is there some trick to using it like an Internet router from the LAN behind it? The reason for needing to provide Internet access THROUGH it is that I need the dynamic DNS client on the server be able to send its heartbeats to the DDNS provider's servers.

Thanks!

[afakhan]

Hi,

You would need to configure NAT (vpn3k only supports PAT in this scenario) for this host to be able to go out to the internet (through it), make sure that your DDNS doesn't need any application level fixup for PAT.

to configure PAT, you would go to :

configuration-> policy management-> traffic management->NAT (interface)

thanks,

Afaq