I'm using the Cisco 4.7 VPN client on an XP box connected to the Internet
via an IPFilter/IPNAT 419 configuration.

The XP box talks on the Internet just fine, but the VPN client refuses to
connect.  Snooping on the external interface of the firewall, I see the UDP
packet go out on port 500, but nothing comes back.  I have tried TCP as
well, with the same results. 

If I connect the XP box to the Internet via Dialup, the VPN client works
just fine.

My only guess is that IPNAT is doing something to the packet that the VPN
server doesn't like, so it's rejecting the packet w/o comment.

My IPNAT looks like:
map le0 172.16.0.0/16 -> a.b.c.d/32 portmap tcp/udp 40000:60000 
map le0 172.16.0.0/16 -> a.b.c.d/32

Any thoughts?  

Thanks...

Reply via email to