Cisco VPN Client Connectivity to PIX501 behind 826 Router

[c.ketting]

Hi,

Is it possible to connect to a PIX501 with the Cisco VPN Client through a Cisco 826 router? So just to be clear: client PC starts VPN Client (in The Netherlands), connects to the internet through 826 router (in The Netherlands, ADSL), then wants to connect to PIX501 (in The United States).

[robhorniachek]

Hi -

Yes it is possible - I do this from home myself. The only 'gotcha' is that you have to use a static NAT for the IP address of the PC. You can't use PAT to do this through the 826. To do this, you will need another outside address, and statically NAT it to the PC. Then you need to allow ESP and AH as well as TCP port 500 through to the PC.

Rob H

[c.ketting]

Thanks, but I have 3 machines in The Netherlands that have to use SAP (application servers located in The US), and 1 internet IP. So every machine has to make it's own VPN connection. Is this still possible?

[abdul.kokumo]

The solution is in the client you are using. VPN Client 3.5 is your fix 'cos it support PAT/NAT. If your client is SECURE VPN CLIENT 1.0 or 1.1 you will have problem which the fix lies in the IOS. I sugest you go with VPN Client 3.5.