Re: Cisco VPN client connecting trough ISA 2004 - problem

Hi Dan,

thanks for reply, that command should be used on client side or at PIX side
(I'm not familiar with cisco products)?

Martin

"Dan Williams" <DanWilliams@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C044B867-41F8-418C-86E6-D6919AECF851@xxxxxxxxxxxxxxxx
Hi Martin,

We have this senario at our office and it works fine.
Clients are Cisco VPN 4.6 connecting to PIX IOS 6.3.
You need to make sure they are minimum IOS 6.3 and have the line:-

ISAKMP NAT-TRAVERSAL

The command is not supported in previous versions.
All of our clients without this configuration will not work from behind an
ISA server.

Regards

Dan

--
Dan Williams [MCSE]
Imex Technical Services


"Martin S." wrote:

Hello Henk,

thanks for reply, however I'm not sure if we understand each other.

My problem is that clients connectig from network behing ISA 2004 which i
s
doing (also) NAT to network with Cisco PIX 501 (as vpn gw) by using Cisco
VPN client.

1. When I connect from home with my laptop (win xp sp2) through my DSL
connection I can connect and work fine.

2. If I connect from office with same laptop, I can connect to that cisco
nw, but nothing else. Client is connected but I can not ping nor connect
to
any device on the remote network.

Any ideas?

Thanks,
Martin


"Henk Steunenberg (Ms)" <stjesp@xxxxxxxxxxx> wrote in message
news:uRCkW$XWGHA.5012@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

http://support.microsoft.com/default.aspx?kbid=885407

By default, Windows XP SP2 no longer supports IPSec NAT-T security
associations to
servers that are located behind a network address translator.
Therefore,
if your
virtual private network (VPN) server is behind a network address
translator, by
default, a Windows XP SP2-based VPN client cannot make a Layer Two
Tunneling
Protocol with IPSec (L2TP/IPSec) connection to the VPN server. This
scenario
includes a VPN server that is running Microsoft Windows Server 2003.

regards,

Henk


"Martin S." <smisik@xxxxxxxxx> wrote in message
news:em7mBLwVGHA.3940@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I have problem with clients connecting with CIsco VPN client to
another
network. Our network is simple with ISA 2004 acting as gw and
firewall.
We have all outgoing traffic allowed except TCP port 25. However, when
users are connecting with Cisco VPN client to mentioned network they
are
able to connect succesfully but not to ping or connect to any device
on
that network. From other netwroks it's working ok with same cisco
client.
We use simple NAT, clients has 10.218.61.X adresses assigned by DHCP
and
ISA has one public adress assigned. Remote network uses 192.168.100.X
adresses. As I wrote, when I connect from outside of our network it's
working fine. I can connect to remote network, and work normaly. If I
connect from our company network, I can connect but nothing else. Does
anyone has any idea what it can cause? Thanks for replies.

Martin








.

Relevant Pages

  • [NEWS] Cisco VPN 5000 Client Multiple Vulnerabilities
    ... Multiple vulnerabilities exist in the Cisco Virtual Private Network (VPN) ... 5000 Client software. ... These vulnerabilities are documented as Cisco bug ID ... CSCdx17109 - MAC OS VPN 5000 Client password vulnerability ...
    (Securiteam)
  • RE: Slow VPN logon and Spuratic folder visibility
    ... I understand that the remote VPN client ... network configuration. ... the VPN client can access SBS fine? ... Slow VPN logon and Spuratic folder visibility ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing VPN Error 619
    ... Outbound VPN problem: ... Q1 - is the test client configured as SecureNET? ... Q2 - what do you find in the ISA logs for your tests? ... I've checked in local network rules and I do have a rule called VPN clients ...
    (microsoft.public.isa.vpn)
  • Re: VPN issues on SBS2003 with ISA 2004 installed
    ... Based on our work above, it seems the problem in client side, so I suggest ... and then click the Network and Dial-up ... Right-click the VPN connection that you want to change, ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN clients unable to connect to other resources.
    ... on the SBS 2003 server just not sure where to go for help on it. ... Next time I'm at my home PC, I'll VPN in and see what IP info I'm getting ... client PC on your LAN, you should be able to do so from a remote VPN client, ... get the network path was not found. ...
    (microsoft.public.windows.server.sbs)