Hi all,
hope you can help me.
I've been hitting with my head trying to put a VPN L2TP with IPsec Policy to work but I haven't been able to.
Basically I have a Draytek router (LAN IP 10.14.99.99) connected to a Cisco Router via the Wan 1 port (WAN IP 10.14.100.97) and the Cisco router having the IP 10.14.100.101. I have the Draytek working as a VPN Server and trough PPTP everything works fine.
Then I was requested to change the connection protocol from PPTP to L2TP over IPSEC. I configured the Draytek and when I tried to connect it wouldn't work. Then remembered that this protocol uses different ports. So I connected to the Cisco Router and executed some changes according to some topics I found in internet for the router to passtrough the VPN traffic but until the moment I haven't been able to put this VPN connection to work and honestly I don't know what to do anymore.
This is the configuration I have in the NAT and in the access lists:
ip nat inside source list nat-list interface Dialer1 overload
ip nat inside source static tcp 10.14.100.97 1723 interface Dialer1 1723
ip nat inside source static esp 10.14.99.99 interface Dialer1
ip nat inside source static tcp 10.14.20.5 8443 interface Dialer1 443
ip nat inside source static tcp 10.14.20.7 22 interface Dialer1 22
ip nat inside source static udp 10.14.100.97 500 interface Dialer1 500
ip nat inside source static udp 10.14.100.97 4500 interface Dialer1 4500
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 10.14.0.0 255.255.0.0 GigabitEthernet0/0
!
ip access-list extended nat-list
permit ip object-group local_lan_subnets any
deny ip any any
permit esp any host 10.14.100.97
permit esp any host 10.14.99.99
permit udp any host 10.14.100.97 eq isakmp non500-isakmp
Can someone please shed some light over this? Is this configuration Ok?
My networking skills are limited and only recently started playing with Ciscos
