|
|
Question : Problem: cisco 2514 nat and vpn ?
|
|
I have been trying to config a 2514 with v 12.2(7) with nat to allow a windows host from the internet to vpn to an internal win 2000 rras server. The nat is working and the internal can access the internet but I can't get the vpn to work. From all the reading I have found I have tried pat but not sure if it is correct but it doesn't work. Layout is win host--internet--cable modem--2514--switch--2000 win DC. I have changes the legit ip's but my current config is:
ip subnet-zero ip name-server 24.25.35.64 ip name-server 24.25.35.65 ! ! ! ! interface Ethernet0 ip address 32.32.32.210 255.255.255.252 ip nat outside
! interface Ethernet1 ip address 192.168.150.1 255.255.255.0 ip helper-address 192.168.1.200 ip nat inside ! interface Serial0 no ip address shutdown no fair-queue ! interface Serial1 no ip address shutdown ! ip default-gateway 32.32.32.209 ip nat inside source list 55 interface Ethernet0 overload ip nat inside source static esp 192.168.150.11 interface Ethernet0 ip nat inside source static udp 192.168.150.11 500 interface Ethernet0 500 ip nat inside source static udp 32.32.32.210 500 192.168.150.11 500 extendable ip classless ip route 0.0.0.0 0.0.0.0 32.32.32.209 ip http server ip pim bidir-enable
ip pim bidir-enable ! access-list 55 permit 192.168.150.0 0.0.0.255 access-list 55 deny any ! The win 2000 DC has 2 nics VPN nic is 192.168.150.11 and 192.168.150.10 is the other I have read a bunch on this but am missing something and am sure some of this config needs to be deleted. Any help is greatly apreciated.
|
Answer : Problem: cisco 2514 nat and vpn ?
|
|
I dont know if this will help, but I have a Cisco SOHO router, and have gotten Win2k VPN to work with 2 simple rules.
First, you will have to NAT port 1723 to the Win 2k machine, and then you will have to change an access list (i use 100) to allow the GRE protocol to work through the router.
access-list 100 permit gre any host xxx.xxx.xxx.xxx (Where xxx is the IP of the internal Win2k server)
Dont know if this will help you, but it made the VPN work for me. :-)
|
|
|
|