Security Basics mailing list archives

Re: VPN problems


From: alexbnedelcu () gmail com
Date: 11 Jun 2007 19:10:09 -0000

As far as i can see there is no NAT problem, you should implement NAT-T if your VPN session is terminated on equipment 
that lies after a NAT box but in your case you haven't described such a topology.
I suppose you're trying to build a l2tp/ipsec remote access connection to your lan from a computer with internet 
access, i skimmed  through the technical specifications for the equipment you are testing and there is no specification 
for the l2tp protocol. 
It may be the case that the Ipsec tunnel comes up but the inner l2tp protocol is not supported by the router thus not 
allowing you to build a solution with the win xp vpn client, you should post some debugging information in order to 
give us a more accurate picture. As far as i know the windows client only supports by default l2tp/ipsec or PPTP 
tunnels. 
I have succesfully managed to implement a l2tp/ipsec remote access solution with a cisco 800 and 1800 series routers 
and xp vpn clients, but those routers support l2tp.

Regarding the choices you have for a vpn client, you could try the cisco vpn client as an alternative to the default 
one that comes with windows. 

Alex


Current thread: