VPN Client 4.x - connection over 3G/GPRS wireless problems

[jeff_green]

Hi,

I'm trying to configure WindowsXP SP1 / VPNClient 4.0.5 to work over a 3G/GPRS wireless connection from a laptop and I'm having problems.

The client connects to our VPN Gateway (PIX5i5e / PixOS 6.3(3) OK and sends IKE / keepalive traffic.

(I can see the the byte counts increment on the

WindowsXP Networking entry properties)

The problem is I can't seem to get any other traffic

i.e. access to our intranet, etc.

The sent byte count increments but the received

byte count is zero in the VPNClient Statistics.

I'm wondering if this is an MTU promlem ?

The service provider is Vodafone and I using

one of their Vodafone 3G cards - supposedly

their "MyLAN" service is enabled on this SIM.

Anyone else had any experiences they'd care to share ?

Many Thanks,

[shaun.oliver]

Your GPRS connection will be NAT'd before it gets to the Internet, so you'll need to enable NAT Traversal (NAT-T) on your PIX.

If NAT-T is the problem, "isakmp nat-traversal 20" should fix it.

[jeff_green]

Hi Shaun,

Yep, that was the problem.

Working fine now - Many Thanks !

[u.theilacker]

We are using a different mobile carrier and we had to pay an additional charge for being able to use ipsec/gre with that carrier.

Symptoms were the same: Authentication worked fine but no traffic.

You might want to check with vodafone if "My Lan" includes ipsec/gre functionality.

regards

[srathmann]

Hello Jeff,

first thing to know about the Vodafone GPRS is that they use an private Intranet with a Firewall to the internet. Because of a bigger private address range in the vodafone network than on the internet side they have to use PAT.

You shoul try to use the NAT traversal function, this should help. But please don´t asked me where ist is, it should be in the docu. I don´t use the VPN client, but have some knowledge about the vodafone GPRS.

Best regards, stefan