Hall of Fame

1. RobWill364,394
2. arnold197,721
3. MikeKane197,312
4. JFrederic...170,047
5. bignewf168,320
6. Qlemo140,915
7. lrmoore138,305
8. ikalmar110,182
9. dpk_wal89,572
10. deimark79,485
11. 3nerds72,036
12. asavener54,580
13. jodylemoine46,900
14. geergon36,385
15. Quori34,527
16. RPPreacher34,355
17. ccomley33,840
18. Roachy1...33,822
19. uetian170733,444
20. MrHusy32,838
21. PeteLong30,854
22. SysExpert30,361
23. giltjr30,241
24. alanhardisty27,978
25. mitrushi27,480

1. RobWill2,021,679
2. lrmoore1,323,628
3. batry_boy467,701
4. arnold359,804
5. dpk_wal265,644
6. JFrederic...242,427
7. MikeKane228,592
8. Qlemo226,232
9. grblades218,409
10. bignewf183,320
11. rsivanandan183,296
12. MrHusy128,332
13. TechSoEasy122,268
14. mwecom...120,329
15. PeteLong116,920
16. keith_ala...115,514
17. SysExpert114,141
18. calvinetter112,805
19. ikalmar110,182
20. Voltz-dk98,355
21. deimark93,160
22. Cyclops3...90,587
23. RPPreacher79,980
24. tim_holman75,964
25. 3nerds72,036

	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.8

Is IPsec / VPN passthrough compatible with PPP authentication in a two-router configuration?

Asked by Brad_Stiritz in Virtual Private Networking (VPN)

Tags: speedstream, 5851, ipsec, passthrough, vpn

Hi,

My situation is a little complicated, but I've tried to break things down as much as possible to permit quick study.

BACKGROUND:

I have a business-class SDSL subscription to DSL.net. DSL.net provided me with a Speedstream 5251 Router configured in bridge mode. No PPP authentication is required.

I also have a Cisco Pix 501 router behind the 5251, which is configured to establish a static-key IPsec VPN tunnel to a realtime data provider. The Speedstream 5251 in bridge mode allows transparent IPsec passthrough, and the VPN has been working trouble-free for more than a year.

PROBLEM:

I am trying to migrate my internet service to Covad. Covad installed an Efficient Networks 5851 router in PPP mode, as Covad requires PPP authentication. Currently, I am in a transition period where both the DSL.net Speedstream 5251 and the Covad Efficient 5851 are live and online.

When I connect my Cisco 501 to the Efficient 5851, and configure the 501 for the IPsec VPN tunnel from the Covad IP address, I can ping the data provider, and they can ping me, but I cannot successfully establish the VPN tunnel.

ATTEMPTED SOLUTION:

I contacted Siemens business-class tech support (Siemens owns Efficient) and they told me that the 5851 is configured to disable VPN passthrough by default. Siemens logged on to the 5851 and enabled it for VPN passthrough. However, I am still unable to establish the IPsec tunnel. Siemens' proposed solution is to set the 5851 for bridge mode.

Again, though, Covad tells me that the Efficient 5851 router cannot be configured for bridge mode, because bridge mode is not compatible with the PPP authentication that Covad requires. Both Covad and Siemens are unable to offer further technical assistance.

QUESTION 1: Is it known to be the case that IPsec passthrough is only compatible with bridge mode, and that IPsec passthrough is incompatible with PPP authentication?

QUESTION 2: If this incompatibility is definitive, then I would like to know for future reference why exactly this is the case, in semi-complete detail. No one at Covad or Siemens that I have spoken to have been able to explain anything in detail.

QUESTION 3: Do you have any helpful advice for my situation, other than "Find a new ISP that can provide a router in bridge mode"? This is my current plan.

Thanks!

Brad

Get your answer NOW

	Title
1	Access-list preventing me from remot…
2	After applying ACL, users can no lon…

Is IPsec / VPN passthrough compatible with PPP authentication in a two-router configuration?

Asked by Brad_Stiritz in Virtual Private Networking (VPN)

Tags: speedstream, 5851, ipsec, passthrough, vpn

About this solution