VPN Client Software through existing VPN 3002 Hardware Client?

[paul.m.phelps]

I have a VPN 3002 Hardware Client (4.7) setup in Network Extension Mode with an IPSec tunnel established to a VPN 3000 Concentrator (4.7). A laptop on the Private side of the VPN 3002 has VPN Client Software (4.6) loaded on it and is configured to establish a IPSec over UDP (Port 500) sesson to a Concentrator behind our VPN 3000. The VPN Client Software on the laptop is unable to successfully make a connection to the distant Concentrator. Can a configuration change be made to allow the second IPSec tunnel to connect through the existing IPSec tunnel? Is this doable? Can the VPN 3002 be configured to allow the second IPSec tunnel to work through its existing IPSec tunnel?

[thomas.chen]

Connect to the VPN Concentrator console port and verify that there are IP addresses assigned to the Private (inside) and Public (outside) interfaces.In addition, verify that there is a default gateway assigned so the VPN Concentrator can forward the packets for the destinations that it does not know about to the default gateway (normally the Internet Gateway Router.Refer http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a008026f96c.shtml for more info.