04-04-2005 08:25 AM - edited 02-21-2020 01:41 PM
Hi
I Got a very strange Problem.I am having cisco2507 router having nat enabled on it with overloading on one end.i got six ip address from the service provider with one used for serial interface and other for gateway.I got vpn based clients and the problems i am facing is that not more than six clients are able authenticate on vpn server.The other side of the network is having pix firewall and dell server working as vpn server and windows 2000 domian server and dhcp server.There is no issue of licence .I am receiving error 721 remote computer not responding
here is the config
User Access Verification
Password:
Password:
Password:
Router>en
Password:
Password:
Router#sh run
Building configuration...
Current configuration : 1554 bytes
!
version 12.1
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Router
!
enable secret xxxx
!
!
!
!
!
ip subnet-zero
!
!
!
!
hub ether 0 1
link-test
auto-polarity
!
hub ether 0 2
link-test
auto-polarity
!
hub ether 0 3
link-test
auto-polarity
!
hub ether 0 4
link-test
auto-polarity
!
hub ether 0 5
link-test
auto-polarity
!
hub ether 0 6
link-test
auto-polarity
!
hub ether 0 7
link-test
auto-polarity
!
hub ether 0 8
link-test
auto-polarity
!
hub ether 0 9
link-test
auto-polarity
!
hub ether 0 10
link-test
auto-polarity
!
hub ether 0 11
link-test
auto-polarity
!
hub ether 0 12
link-test
auto-polarity
!
hub ether 0 13
link-test
auto-polarity
!
hub ether 0 14
link-test
auto-polarity
!
hub ether 0 15
link-test
auto-polarity
!
hub ether 0 16
link-test
auto-polarity
!
interface Ethernet0
ip address x.x.x.1 255.255.255.0
ip nat inside
!
interface Serial0
bandwidth 512
ip address x.x.x.58 255.255.255.0
no ip proxy-arp
ip nat outside
no fair-queue
!
interface Serial1
no ip address
shutdown
!
ip nat pool ISPPOOL x.x.x.57 x.x.x.62 netmask 255.255.255.248
ip nat inside source list 1 pool ISPPOOL overload
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.4
ip route 0.0.0.0 0.0.0.0 x.x.x.57
ip http server
!
access-list 1 permit 192.168.11.0 0.0.0.255
!
line con 0
password xxx
login
line aux 0
line vty 0 4
password xxx
login
!
end
Router#
Regards
Tarun
09872892059
04-04-2005 10:06 PM
Hi,
Consider enabling "NAT Traversal" feature on the PIX:
isakmp nat-traversal 20
Reference:
Regards,
Mustafa
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide