cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
344
Views
0
Helpful
2
Replies

XP IPSec client through NAT router to IOS IPSec router

jrogalski
Level 1
Level 1

Hello,

perhaps this setup is not possible? I am trying to use the built-in IPSec on a XP client to connect to an IPsec router using des and md5. The client must get to the router (tunnel endpoint) through another router performing NAT on it's interface connected to the internet. It looks like the isakmp sa is setup, but after security is negotiated, the router in between will not perform NAT. It's logging a translation failed (a) message. I checked for this error which says that IP subnet zero must be enabled...which it was/is. Anyone ever try this or have and suggestions? Thanks.

John.

2 Replies 2

kevinchan
Level 1
Level 1

Hi,

Yes ... XP native vpn client (L2TP over IPSec) doesn't work behind NAT... There are note in the documentation / Tips on Cisco site.... =)

Kevin

Hi Kevin. I thought I read this at some point while searching Cisco's site. Thanks for verifying this for me.