Unfortunately not, even if you are using different IP addresses for the outside interface and the one used for NAT/PAT addresses. An alternate: use a dedicated IP address, static transaltion for the inside PC and then you need not enable the "fixup e...

My apologies for late reply and am not sure if some one has replied to your query.From the looks - it seems that the vpn client may have been terminated due to non-authenitcation from the authentication server. Are you using a Radius server for authe...

I am afraid it is not possible. Unless you have a LAN-LAN setup which can be used to route the traffic over to the banks' VPN3K.Workaround:The Bank folks can lockdown (if needed) the ports with which you connect via LAN-LAN and allow only TN3270 sess...

Hi Stefan,- With regards to the ipsec pahse 2, it can be verified once a tunnel is established between vpn client and vpn3k. Goto "Administration | Administer Sessions" and click on the client connected client, this will show you detailed information...

Hi Stefan,- In the above case, I am assuming the statement: "the 10.253.4.1 router has a static route that points back the 10.253.253.0 255.255.255.0 to VPN3005 10.253.4.4 "is a typo where the network you mean is 10.253.252.0/24. - Assuming that you ...