Connecting Cisco 7960 over VPN using Cisco VPN Client

Posted on 2005-04-07
Last Modified: 2010-04-12
I am doubtful if this is even possible but maybe somebody knows otherwise. I have a PIX515e firewall with VPN protecting my internal network. I am using Cisco VPN Client at a remote location and successfully entering the network. What I need to do is to somehow share the Cisco VPN Client's connection with the 7960 IP phone, preferebly by plugging the phone directly into the computer. I have successfully used soft-phone's with this configuration. Is this possible with a hard phone like the 7960?

Question by:jbednyak
    LVL 1

    Expert Comment

    you can us a routin soft like winroute to do a route from your phone to the pix usin the pc like a Gw
    or you use your dsl router to connecte to the pix and make a route to the pix.
    LVL 36

    Expert Comment

    The PIX will only talk to the IP address it assigned to the VPN client and therefore you cannot do anything with routing alone to get it working.
    In theory you should be able to run a SIP proxy on your PC and configure the IP phone to use that proxy but I don't know if there are any free SIP proxy servers available for Windows.

    In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection. However this system uses Network Address Translation (NAT) and the SIP protocol IP phones use is not NAT friendly and you are likly to have difficulty getting it to work if at all.

    Your best approach would be to get a PIX501 for the remote location and configure the PIX501 to connect to the VPN.
    You can either configure it with a pernanent LAN-LAN vpn connection or get it to act as a VPN client.
    The VPN client approach will use NAT but it has 'fixup protocol sip' which will adjust the SIP voice packets to avoid any problems.
    LVL 79

    Expert Comment

    Duplicate of this Q:

    As I stated in the other question, I shudder to think that it would even be possible for any remote user to share the VPN connection. To the best of my knowledge it is not possible. Use a LAN-LAN VPN with another PIX/vpn router, or use the softphone option.

    grblades - glad to see you back around once in a while!
    Did you think this one through?
    >In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection.

    Author Comment

    I don't think that it is possible either, but in theory it should be. If a program like Internet Explorer can use the VPN connection, then why couldn't software be written to act as a "middle man" between the VPN connection and another Local Area Connection on a machine?
    LVL 36

    Accepted Solution

    >In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection.
    A bit badly worded. In theory it should be possible but the VPN client will be written to try and stop people from being able to do this so if you can do it dont expect it to be easy :)

    The "middle man" approach you mention is basically a SIP Proxy and phones support these. The phone will talk to the proxy on the VPN client machine and it will forward the voice packets over the VPN connection for you. I cant see why this approach would not work as long as the 'permit local LAN access' box in the VPN client is ticked.
    Have a look at

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Article by: user_n
    How Sip Phone (User Agent) works and communicates with sip servers 1.  There is a sip server and a sip registrar.  The sip server and sip registrar can be one server or two different servers. The sip registrar is the server on which it is record…
    As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now