VPN Client problem via Vodafone

[amcnee]

I am having trouble connecting to a PIX over the Vodaphone GPRS/3G network. The connection is established OK but not traffic is passed over the VPN. I tried connecting the client using the same computer over a wired connection and it works OK. Some time ago, I remember seeing a document describing problems using Vodafone and an older version of Pix firmware but this Pix is running 6.3(1). Cient version is 4.6.

Any ideas.

Thanks

Archie

[aacole]

Archie,

I had a similar problem with a GPRS client on the Orange network.

This is most likely due to your traffic crossing a NAT boundary. Does the PIX have the command `isakmp nat-traversal nn' applied?

In my case the GPRS network gave me a 10.x.x.x address, and so the packets were NAT'd when sent to a registered Internet address.

Also the client needs to be running NAT as well, this is seen on the Transport page under Client properties, and the active state can be verified by looking at the statistics page when the client is connected.

[amcnee]

isakmp nat-traversal fixed it although the Pix seemed to require a reload before it would work. Vodafone also use the 10.x.x.x addresses.

Thanks

Archie