Easy VPN Server and internal Cisco VPN Clients

[crispin.stewart]

Hello Everyone

I'm using a Cisco 2821 router with advanced security feature set.

I have one public IP address used on an external interface, internal hosts use PAT to access the internet.

Is it possible to run a Easy VPN Server on this external interface while at the same time having internal hosts using Cisco VPN Client (IPSec over UDP) to connect to other VPN Servers on the internet?

I suspect that when internal hosts are using the Cisco VPN client that the Easy VPN Server is intercepting the packets on the way back in and dropping them.

Thanks in advance.

Crispin

[umedryk]

As far as I see it, these are two different things. Configuring a box as EzVPN server and allowing the internal VPN clients to have tunnels with a concentrator outside can go hand in hand.

[jackko]

when configuring the remote vpn on the router, the last step is to apply the crypto to an interface.

with the posted scenario, the crypto will be applied onto the outside interface thus it will not affect internal user to access other vpn server from the internet.

hope this helps