Re: L2TP over IPsec VPN and nat-t
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 11/01/04
- Next message: Ashish Chetal [MSFT]: "RE: PKI"
- Previous message: Phillip Windell: "Re: L2TP over IPsec VPN and nat-t"
- In reply to: Adam: "L2TP over IPsec VPN and nat-t"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 01 Nov 2004 18:01:20 GMT
In addition to suggestions about configuring client for NAT-T the NAT
routers that the users are behind have to be configured. They usually have a
setting for ipsec pass-through that can be switched on or off. -- Steve
"Adam" <Adam@discussions.microsoft.com> wrote in message
news:7EFD4EEB-4421-410B-BB16-9E41752230C5@microsoft.com...
>I am having problems making a L2TP over IPsec VPN work when the remote
>client
> is behind a NAT device. The VPN uses IPsec certificates and this all works
> good if the remote user is directly connected to the internet (i.e. the
> machine has a public IP address assigned), but as soon as the computer is
> behind a device and receives a private IP address, the VPN tunnel times
> out.
> (The IPsec creates successfully, but the L2TP connection fails...error
> 682).
> These remote clients are connecting a Netscreen 25 for their VPN tunnels.
> This device supports nat-t. The L2TP connections for this device only work
> in
> "transport mode".
>
> One other thing, this process works just fine if I have the remote clients
> connect just using an L2TP tunnel (no IPsec). Then there seems to be no
> problem with NAT and the remote clients. I have tested this VPN setup
> using
> windows 2000, windows XP pro, and windows XP home edition. All three OSs
> respond the same.
>
> I am wondering if there is some type of setting I need to modify in
> windows
> that will allow IPsec to function in "transport mode" or at least apply
> nat-t
> to the L2TP connection. Thanks in advance, Adam
>
- Next message: Ashish Chetal [MSFT]: "RE: PKI"
- Previous message: Phillip Windell: "Re: L2TP over IPsec VPN and nat-t"
- In reply to: Adam: "L2TP over IPsec VPN and nat-t"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
