Connecting Cisco 7960 over VPN using Cisco VPN Client

I am doubtful if this is even possible but maybe somebody knows otherwise. I have a PIX515e firewall with VPN protecting my internal network. I am using Cisco VPN Client at a remote location and successfully entering the network. What I need to do is to somehow share the Cisco VPN Client's connection with the 7960 IP phone, preferebly by plugging the phone directly into the computer. I have successfully used soft-phone's with this configuration. Is this possible with a hard phone like the 7960?

Thanks,
Jerry
jbednyakAsked:
Who is Participating?
 
grbladesConnect With a Mentor Commented:
>In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection.
A bit badly worded. In theory it should be possible but the VPN client will be written to try and stop people from being able to do this so if you can do it dont expect it to be easy :)

The "middle man" approach you mention is basically a SIP Proxy and phones support these. The phone will talk to the proxy on the VPN client machine and it will forward the voice packets over the VPN connection for you. I cant see why this approach would not work as long as the 'permit local LAN access' box in the VPN client is ticked.
Have a look at http://www.nongnu.org/partysip/partysip.html
0
 
yhaddiabdoCommented:
hay
you can us a routin soft like winroute to do a route from your phone to the pix usin the pc like a Gw
or you use your dsl router to connecte to the pix and make a route to the pix.
0
 
grbladesCommented:
The PIX will only talk to the IP address it assigned to the VPN client and therefore you cannot do anything with routing alone to get it working.
In theory you should be able to run a SIP proxy on your PC and configure the IP phone to use that proxy but I don't know if there are any free SIP proxy servers available for Windows.

In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection. However this system uses Network Address Translation (NAT) and the SIP protocol IP phones use is not NAT friendly and you are likly to have difficulty getting it to work if at all.

Your best approach would be to get a PIX501 for the remote location and configure the PIX501 to connect to the VPN.
You can either configure it with a pernanent LAN-LAN vpn connection or get it to act as a VPN client.
The VPN client approach will use NAT but it has 'fixup protocol sip' which will adjust the SIP voice packets to avoid any problems.
0
 
lrmooreCommented:
Duplicate of this Q:
http://www.experts-exchange.com/Networking/Broadband/VPN/Q_21380754.html

As I stated in the other question, I shudder to think that it would even be possible for any remote user to share the VPN connection. To the best of my knowledge it is not possible. Use a LAN-LAN VPN with another PIX/vpn router, or use the softphone option.

grblades - glad to see you back around once in a while!
Did you think this one through?
>In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection.
0
 
jbednyakAuthor Commented:
I don't think that it is possible either, but in theory it should be. If a program like Internet Explorer can use the VPN connection, then why couldn't software be written to act as a "middle man" between the VPN connection and another Local Area Connection on a machine?
0
All Courses

From novice to tech pro — start learning today.