VPN with two cisco routers

[scotlaclair]

We now have a T1 line with 1721 router providing internet access. I have another cisco router inside the network that serves as a VPN router 3621. How can I forward VPN CLIENT 4.x through the 1721 and onto the VPN router 3621? Or is there a better way to set this up? On our old DSL router we simply filtered all incoming traffic to a certain IP and sent it on to the VPN router IP.

[jackko]

internet <--> 1721 <--> 3621

is the subnet between 1721 and 3621 public or private? assuming it's private, then static nat needs to be configured on 1721.

ip 50, udp 500 and udp 4500 also need to be permitted. further the static nat require 1-to-1 mapping as pat doesn't cope with ip 50.

[scotlaclair]

The subnet is private. Do you possibly have the commands to set this up. I have been trying everything and it doesn't seem to work. Thanks.

[rating_is_vital]

Hi,

Please post the configuration

[RubinoM]

I see two way:

1- If you can, assign a public IP address at the 3621's interface that term vpn.

2- If the first solution it's impossible, you can do a static nat between the ip address of the 3621's outside interface and a public IP address on your line. If you have only one IP address there isn't a problem, because static NAT has precedence against PAT.