VPN LAN to LAN and Client to LAN same site IP address

[admin_2]

Hi,

I'm having issues with a connection between a VPN 3000 and a 877 IOS router.

Trying to connect a remote 877 L2L tunnel to a VPN 3000 Conc for voice traffic and a PC C2L connection from behind the same 877 remote site to the VPN 3000 Conc for data traffic.

When the C2L user connects they disconnect the L2L service as the source address for the L2L tunnel and the NATed address for the C2L are the same.

Is there a way around this ....

[mheusinger]

Hello,

I would use the L2L connection for both, the data and VoIP traffic. Any reasons for not taking this solution?

Regards, Martin

[#3]

They have public access wireless at each site with an Internet connection. We are using the VPN client encryption to provide security for the data connection.

Got this partially working by changing the C2L connection to use TCP for the tunnel. However still have an issue when C2L users disconnect as this brings down the L2L tunnel with the same source IP address.

[grant.maynard]

I don't think this will work: the VPN Concentrator will be configured with the 877's public IP as a L2L peer, so it expects L2L traffic from it.

Could you hide client VPN behind a different IP?