VPN client cannot connect

[scatalina]

I have a user that is remoting into another networks Concentrator. The user can connect to the remote network from home using his work laptop. However when he tries to connect with his laptop from our network, it fails.

The VPN is IPSec over TCP with smart card authentication. The TCP port is open through the firewall and I can see the traffic from the distant end send a Reset packet to the client.

I have attached the log from the VPN Client. I was wondering if the problem could be caused by the user logging in to the laptop locally vs. through the domain.

Any help is appreciated.

Thanks

[andrew.prince]

Are you blocking on the way out from your network to the remote?

Are you allowing:-

UDP 500

UDP 4500

ESP = protocol 50

And another tcp/udp port they may have configured for NAT-T?

TCP 4451 is key - check your logs/acl's for this.

HTH>