• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 295
  • Last Modified:

VPN 3000 Concentrator multiple connections from one site.

We have a Cisco VPN 3000 Concentrator and can't find a way to allow more than one computer at a time from an offsite location to connect. Example -offsite office has 4 computers connected to DSL and only one at a time can connect to the VPN concentrator. Is there a setting that will allow multiple connections.
0
briandaniel
Asked:
briandaniel
  • 7
  • 2
1 Solution
 
amoldkelkarCommented:
Hi,
Is there any router or a firewall sitting at the remote site? It might be doing PAT
Also can you check on the version of your concentrator or client software version?
Also make sure you have enabled NAT-T thats NAT traversal as well?
Let me know if anything helps.

-AK
0
 
amoldkelkarCommented:
Is there any IP Pool used on the concentrator? Is so the check if the range doesnt overlap with any of the existing ips in network.
You may even want to refer/follow the concentrator config as well,
http://www.cisco.com/warp/public/471/ipsec_3000.pdf

-AK
0
 
briandanielAuthor Commented:
The following information is what shows for the versions. It does have NAT-T enabled.

VPN Concentrator Type: 3005
Bootcode Rev: Cisco Systems, Inc./VPN 3000 Concentrator Series Version 2.5.Rel Jun 21 2000 18:57:52
Software Rev: Cisco Systems, Inc./VPN 3000 Concentrator Version 4.1.7.E Mar 14 2005 13:41:22
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 
amoldkelkarCommented:
IS there anyway you group all the remote users?

Can you please post your network diagram as well as the config if possible?

-AK
0
 
amoldkelkarCommented:
HI,
Sorry for too many clarifications but even i am trying to figure out the problem and understand.

Are you using Cisco ACS on windows machine for remote users? If so then you might want to check if you have added all users under the group.
You may refer to the following link for the steps,
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00807f6e76.shtml#backinfo

-AK
0
 
amoldkelkarCommented:
R the 4 offsite comps creating dial-up VPNs with the concentrator?
R they on same LAN? I think so. Correct me if i am wrong.

If thats the case and if you have a firewall set on the remote LAN side then i would suggest you to go for site-to-site than dialup vpns
using site to site you will be able to have access for any number of users.

-AK
0
 
amoldkelkarCommented:
Also if they r 4 dial-up vpns using the same outgoing gateway then its working at it should work.
Only 1 user can work at a time.
Reason because they are on same LAN and using same outgoing gateway.

So i suggested you can have site-to-site if possible.

-AK
0
 
briandanielAuthor Commented:
The last comment about the same outgoing gateway must be the problem because they are using the same gateway. I don't have a diagram of the network, it is a complete mess and I have only been here a short time. I am in the process of trying to straighten things out, but keep running into different problems. I haven't had to setup a site to site, do you know of any good documentation? Thanks!
0
 
amoldkelkarCommented:
Hmm.
Before anything can you tell me if you plan to build site-to-site vpn then its between the VPN concentrator and which device? Is the other device a juniper fw or something in Cisco or something else?
Actually you can refer following links for the config (but not sure how much will they help you since i dont know abt the nw diagram of yours but am sure it will help)

Guessing that the following link could help you the most in understanding the exact config required on a concentrator and a router to talk,
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009482e.shtml#conf

Miscellaneous links,
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00807f6e76.shtml

http://www.dslreports.com/faq/14243

In the following link you can find a detailed ipsec vpn site-to-site configuration in between two cisco routers.
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a00801d55aa.shtml

Lots of links pointing towards the config of vpn on the concentrator,
http://www.cisco.com/pcgi-bin/search/search.pl?siteToSearch=cisco.com&searchPhrase=configure+VPN+on+VPN+3000+concentrator&country=US&language=en&filter=p

Hope something should work out for you.
Sorry for posting lots of links. Only thing is the network is not known.

Let me know.

Thanks
-AK
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 7
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now