Is there a way to force the VPN client to use NAT-T when the device isn't NATed but ESP is otherwise blocked?My VPN client connects but tries to use ESP, even though IPSec over UDP is selected, after detecting that no NAT is taking place.
I've successfully setup remote VPN connections to my ASA using vpnc as the client and everything behaves as expected. I'm trying to test the official Cisco client and I'm unable to make the same SSH connections across the VPN as I was using vpnc.The...
I've been configuring my ASA and noticed that although I configured an access-list incoming on the external interface to allow pings of the external interface, the packets didn't appear to be hitting that access list.I removed the parts of the access...
I currently believe that the problem is due to the behavior of NAT-T when ESP is blocked by a firewall rule but NATing doesn't take place. Seehttp://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=General...
Thanks. Using Linux's 'vpnc' as the VPN client provides a "force-natt" option which does the trick so a little disappointed I can't do it with the Cisco client.I also found references to a feature request #CSCdz58488 so I thought it may have been imp...
