I am currently doing this with a client but i am using the IOS based vpn
Client (cisco secure vpn client) and my tunnel is terminating on a 3640 with
ios ipsec 56.  I am using preshared keys. md5 hash and des.  on the remote
side I am using nat overload and it does work.  I can't attest it will work
with the VPN concentrator client but I dont see why not.  Hope this helps

George, Head Janitor, CCNA CCDA
Cisco Systems


""Uniplace - Alexander Krastelev""  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello,
>
> Does anyone know if Cisco IOS (any version) supports IPSEC passthrough
over
> NAT ?
>
> I need to make the following configuration running:
>
> [Server]---[VPN gateway]------internet-----[Cisco1600,NAT]----[Client]
>
> - Client (a PC with IPSEC VPN client) should have access to Server over
> IPSEC VPN
> - Cisco 1600 makes NAT with overload
> - IPSEC protocol is IPSEC ESP (not AH)
>
> I have two options:
> -to do something with Cisco to let it pass IPSEC traffic;
> -to switch VPN in UDP-encapsulated mode (IPSEC-over-UDP), which works over
> the most dumb NAT (we have to pay for upgrade, however).
>
> So my question is, does Cisco suppport IPSEC passthrough ?
>
> Alexander




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8259&t=8150
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to