cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
437
Views
0
Helpful
1
Replies

Not More than six VPN clients

tarun209
Level 1
Level 1

Hi

I Got a very strange Problem.I am having cisco2507 router having nat enabled on it with overloading on one end.i got six ip address from the service provider with one used for serial interface and other for gateway.I got vpn based clients and the problems i am facing is that not more than six clients are able authenticate on vpn server.The other side of the network is having pix firewall and dell server working as vpn server and windows 2000 domian server and dhcp server.There is no issue of licence .I am receiving error 721 remote computer not responding

here is the config

User Access Verification

Password:

Password:

Password:

Router>en

Password:

Password:

Router#sh run

Building configuration...

Current configuration : 1554 bytes

!

version 12.1

no service single-slot-reload-enable

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname Router

!

enable secret xxxx

!

!

!

!

!

ip subnet-zero

!

!

!

!

hub ether 0 1

link-test

auto-polarity

!

hub ether 0 2

link-test

auto-polarity

!

hub ether 0 3

link-test

auto-polarity

!

hub ether 0 4

link-test

auto-polarity

!

hub ether 0 5

link-test

auto-polarity

!

hub ether 0 6

link-test

auto-polarity

!

hub ether 0 7

link-test

auto-polarity

!

hub ether 0 8

link-test

auto-polarity

!

hub ether 0 9

link-test

auto-polarity

!

hub ether 0 10

link-test

auto-polarity

!

hub ether 0 11

link-test

auto-polarity

!

hub ether 0 12

link-test

auto-polarity

!

hub ether 0 13

link-test

auto-polarity

!

hub ether 0 14

link-test

auto-polarity

!

hub ether 0 15

link-test

auto-polarity

!

hub ether 0 16

link-test

auto-polarity

!

interface Ethernet0

ip address x.x.x.1 255.255.255.0

ip nat inside

!

interface Serial0

bandwidth 512

ip address x.x.x.58 255.255.255.0

no ip proxy-arp

ip nat outside

no fair-queue

!

interface Serial1

no ip address

shutdown

!

ip nat pool ISPPOOL x.x.x.57 x.x.x.62 netmask 255.255.255.248

ip nat inside source list 1 pool ISPPOOL overload

ip classless

ip route 0.0.0.0 0.0.0.0 x.x.x.4

ip route 0.0.0.0 0.0.0.0 x.x.x.57

ip http server

!

access-list 1 permit 192.168.11.0 0.0.0.255

!

line con 0

password xxx

login

line aux 0

line vty 0 4

password xxx

login

!

end

Router#

Regards

Tarun

09872892059

1 Reply 1

mhussein
Level 4
Level 4

Hi,

Consider enabling "NAT Traversal" feature on the PIX:

isakmp nat-traversal 20

Reference:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727a9.html#wp1027312

Regards,

Mustafa