• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Help getting cisco IPsec to work at my apt

C

cross6

Senior member
I use Cisco IPsec client to connect to work. The client works fine on my laptop.

My apt provides internet via ethernet jacks in the walls.

The client WILL connect, but I can't ping or pass traffic through it.

Any idea on how to get this working? Can I tunnel it somehow?
 
You would need to get in touch wtih the actual ISP Provider or with whoever set up the
connections into each apt ... they may be going thru a Router which is Firewalled ... if so
you need to know what port you use for the client & have the router admin add that port
to the allowed list for your ethernet port on the router
 
Odds are that you will need a router that simply has IPSec VPN passthrough.


Worst case scenario, you'll ahve to get a router that supports NAT traversal or jsut plug your computer directly into your broadband modem.
 
Originally posted by: Goosemaster
Odds are that you will need a router that simply has IPSec VPN passthrough.


Worst case scenario, you'll ahve to get a router that supports NAT traversal or jsut plug your computer directly into your broadband modem.
Click to expand...


What part of I have ethernet jacks in my walls from the apt do you not understand.
 
first, make sure it is OK with work for you to be doing this. I certainly wouldn't allow it.

second, set your client up to perform NAT traversal exactly as it is setup on your laptop. the client and the concentrator have to agree on how to do it.

connecting but not able to send/receive is almost always a NAT problem.

-edit- never mind. I though the laptop worked but you wanted to install it on a home machine. Either way - the client and concentrator will have to do NAT traversal. So this is something your companies IT will have to fix.
 
Originally posted by: spidey07
first, make sure it is OK with work for you to be doing this. I certainly wouldn't allow it.

second, set your client up to perform NAT traversal exactly as it is setup on your laptop. the client and the concentrator have to agree on how to do it.

connecting but not able to send/receive is almost always a NAT problem.

-edit- never mind. I though the laptop worked but you wanted to install it on a home machine. Either way - the client and concentrator will have to do NAT traversal. So this is something your companies IT will have to fix.
Click to expand...



I use my latop vpn behind nat routers all the time. Just doesn't work at my apt.
 
doesn't matter. most SOHO routers have VPN pass-through feature that knows how to handle the encapsulated security payload. In your apartment scenario they are probably doing PAT with commercial gear that doesn't allow for such a feature.

open the client and look at the options. there is something in there about nat traversal, make sure it is enabled or call your company and ask them how it is supposed to be setup.

I'm 99% sure you have a NAT problem, because those are exactly the symptoms of it. the IPsec portion comes up just fine but the ESP tunnel won't work because there is no layer4 information - just garbage after layer3. NAT/PAT device doesn't know what to do with it and can't perform a translation.
 
Also, my host network isn't the same network as the vpn pool on the pix, I know that can cause this problem.

Spidey I can post my pix config, censored of course 😱
 
Originally posted by: spidey07
no -, key on my keybo-rd.
Click to expand...
Ah! Here's my chance, Spidey.

I'll give you a free trip to Hawaii for the correct answer to this quesiton:

Who is Bill Gates?
a) A founder of Microsoft
b) The pizza delivery boy.
c) The Secretary of Defense.

And the correct answer is:
a), b), or c) ? 🙂
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top