Trouble accessing gateways thru VPN

[j.mccartney]

I can access a customers voice-gateways thru VPN with my home TW cable modem connection but in the office thru same VPN connection cannot. I get in to the VPN OK at office but cannot ping/telnet to devices. I do see the routes in the VPN Route Details tab, but I also do not see any return packes in the Tunnel Details tab. Any insight, I'm posting some attachements when it works vs when it doesn't...thanks for the help (newby with VPNs).

[b.hsu]

Try this

1.Check the routes,whether it pointing correct gateway

2. check VPN Client's ip addresses

Try these links:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2286/products_user_guide_chapter09186a00801f0e06.html

http://www.cisco.com/warp/public/471/vpn_3000_faq.shtml

http://www.cisco.com/en/US/products/sw/secursw/ps2308/prod_tech_notes_list.html

[ajagadee]

John,

What is the internet gateway @ your office and is your PC IP Address getting a Static Public IP Address when traffic is destined to the internet or is it Port Address Translated.

And also, what option are you using to connect to the VPN Server. Is it IPSEC, IPSEC Over UDP or IPSEC Over TCP and what is the VPN Server that you are connecting to.

If you are using IPSEC, then UDP Port 500 and Protocol 50 (ESP) are used to build the tunnel and encrypt the packets. So, if your office is set up for PATing your IP, then this set up will not work. Since Port Address Translation does not understand Protocol and your IPSEC packets will get dropped at the PATing Device.

I hope it helps.

Regards,

Arul

** Please rate all helpful posts **

[martin_lx1980]

ajagadee,

When I am using vpnclient to connect VPN Server,I do not choose "enable transparent tunneling".Does it refer to "using IPSEC"?

According to your comment,

If you are using IPSEC, then UDP Port 500 and Protocol 50 (ESP) are used to build the tunnel and encrypt the packets. your office is set up for PATing your IP, then this set up will not work.

When packet arrive device for PATing,the device will translate source ip address only ,not the port. Why it does not work? When i must choose "enable transparent tunneling"?

Thanks a lot

martin