jbednyak
asked on
Connecting Cisco 7960 over VPN using Cisco VPN Client
I am doubtful if this is even possible but maybe somebody knows otherwise. I have a PIX515e firewall with VPN protecting my internal network. I am using Cisco VPN Client at a remote location and successfully entering the network. What I need to do is to somehow share the Cisco VPN Client's connection with the 7960 IP phone, preferebly by plugging the phone directly into the computer. I have successfully used soft-phone's with this configuration. Is this possible with a hard phone like the 7960?
Thanks,
Jerry
Thanks,
Jerry
The PIX will only talk to the IP address it assigned to the VPN client and therefore you cannot do anything with routing alone to get it working.
In theory you should be able to run a SIP proxy on your PC and configure the IP phone to use that proxy but I don't know if there are any free SIP proxy servers available for Windows.
In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection. However this system uses Network Address Translation (NAT) and the SIP protocol IP phones use is not NAT friendly and you are likly to have difficulty getting it to work if at all.
Your best approach would be to get a PIX501 for the remote location and configure the PIX501 to connect to the VPN.
You can either configure it with a pernanent LAN-LAN vpn connection or get it to act as a VPN client.
The VPN client approach will use NAT but it has 'fixup protocol sip' which will adjust the SIP voice packets to avoid any problems.
In theory you should be able to run a SIP proxy on your PC and configure the IP phone to use that proxy but I don't know if there are any free SIP proxy servers available for Windows.
In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection. However this system uses Network Address Translation (NAT) and the SIP protocol IP phones use is not NAT friendly and you are likly to have difficulty getting it to work if at all.
Your best approach would be to get a PIX501 for the remote location and configure the PIX501 to connect to the VPN.
You can either configure it with a pernanent LAN-LAN vpn connection or get it to act as a VPN client.
The VPN client approach will use NAT but it has 'fixup protocol sip' which will adjust the SIP voice packets to avoid any problems.
Duplicate of this Q:
https://www.experts-exchange.com/questions/21380754/How-to-share-a-Cisco-VPN-Client-connection.html
As I stated in the other question, I shudder to think that it would even be possible for any remote user to share the VPN connection. To the best of my knowledge it is not possible. Use a LAN-LAN VPN with another PIX/vpn router, or use the softphone option.
grblades - glad to see you back around once in a while!
Did you think this one through?
>In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection.
https://www.experts-exchange.com/questions/21380754/How-to-share-a-Cisco-VPN-Client-connection.html
As I stated in the other question, I shudder to think that it would even be possible for any remote user to share the VPN connection. To the best of my knowledge it is not possible. Use a LAN-LAN VPN with another PIX/vpn router, or use the softphone option.
grblades - glad to see you back around once in a while!
Did you think this one through?
>In theory you should be able to use some form of internet connection sharing between the PC and the IP phone so that it shares the VPN connection.
ASKER
I don't think that it is possible either, but in theory it should be. If a program like Internet Explorer can use the VPN connection, then why couldn't software be written to act as a "middle man" between the VPN connection and another Local Area Connection on a machine?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
you can us a routin soft like winroute to do a route from your phone to the pix usin the pc like a Gw
or you use your dsl router to connecte to the pix and make a route to the pix.