Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
908
Views
0
Helpful
8
Replies

NAT - IPSec over UDP not working

rbinc
Level 1
Level 1

‎12-20-2002 06:14 AM - edited ‎02-21-2020 12:14 PM

Hi,

I have a Cisco Systems, Inc./VPN 3000 Concentrator Version 3.5.2.Rel Feb 14 2002 12:10:21. I am trying enable NAT so my users can browse the internet while vpning into my network (this is a must have per our users) I have a private IP on my private inferface. I have IPSec over UDP enabled and NAT enabled with 192.168.1.1/24 map udp/tcp enabled but it's not working.

Am I missing anything?

Client: 3.5.1

Should I update my client and vpn concentrator?

Thanks

Jenn

Labels:
0 Helpful
8 Replies 8

kvermeylen
Level 1
Level 1

‎12-20-2002 06:44 AM

Jenn,

I experienced the same problem.

Upgrading both VPN Conc and VPN client to V3.6 solves your issue.

KR

Kurt

0 Helpful

rbinc
Level 1
Level 1
In response to kvermeylen

‎12-20-2002 06:54 AM

Thank you. I will do that now.

0 Helpful

kvermeylen
Level 1
Level 1
In response to rbinc

‎12-20-2002 07:02 AM

Please let me know if some problems still occur.

Kurt

0 Helpful

ajagadee
Cisco Employee
Cisco Employee

‎12-20-2002 11:39 AM

Hi Jenn,

Just a quick clarification, I guess you want to tunnel all traffic from the client to the VPN3000 and have the VPN3000 do the PAT and send the traffic to the internet.

If this is not the case, then Split Tunneling might be an option for you.

How are you assigning ip addresses to the remote users. If its a pool of ip addresses then make sure that you have added the pool of ip addresses in the interface rules under NAT.

I guess it might be more of a config issue than a code issue.

Regards,

Arul

0 Helpful

rbinc
Level 1
Level 1
In response to ajagadee

‎12-20-2002 11:43 AM

I want to allow my vpn3015 to pat all traffic to the internet. I have ipsec over udp enabled and nat enabled. looks like nat is working (I see sessions) but can't get to the internet. i was going to try to update my concentrator/client (still waiting for my contract #.

I am assigning clients via address pool and nat has a rule for them.

you think it could be the versions?

0 Helpful

ajagadee
Cisco Employee
Cisco Employee
In response to rbinc

‎12-20-2002 01:46 PM

Hi,

I will test this set up with 3.5.2 and let you know.

Regards,

Arul

0 Helpful

ajagadee
Cisco Employee
Cisco Employee
In response to ajagadee

‎12-22-2002 10:25 PM

Hi Jenn,

I tested this feature with 3.5.2 and it works. Anyways, you are better off going to the latest code. Let me know how the testing goes with the latest code.

Regards,

Arul

0 Helpful

Nelson Rodrigues
Cisco Employee
Cisco Employee
In response to ajagadee

‎12-25-2002 08:49 PM

You need to add UDP/TCP filter rules to the public filter also.

Nelson

0 Helpful
Customers Also Viewed These Support Documents