ipsec with pix vers. 6.2.2 and unity client vers. 3.6 behind an pat router

[ROBERT SCHUKNECHT]

hello,

i have to set up an vpn connection between an cisco unity client vers 3.6, which is behind an pat router, and a pix 515 vers. 6.2(2). when i start the vpn connection at the client, i am able to connect, the isakmp sa´s will be generated and the xauth is also working. but when i will start an tcp/ip connection over the tunnel it doesn´t work. i suppose the pat router will be the problem. is there anything that i have to configure at the pix or the unity client, so this scenario will work?

thanks in advance

robert

[awaheed]

Hi Robert,

At this time the we cannot terminate an IPSec connection at the PIX if it comes in from behind a PAT device. One thing we might be able to do is to setup EzVPN client from this PAT Router (if its a Cisco Router like 800 or 1700 series) then it would work otherwise we would need to put a hardware client at this site for it to work.

Hope this helps,

Regards,

Aamir

-=-