Solved

How to allow multiple users in a hotel, using Cisco VPN client software, to connect to the company Cisco VPN Concentrator

Posted on 2010-09-21
6
578 Views
Last Modified: 2012-05-10
I have 10 users at a hotel all using a cisco vpn software client to connnect to the corporate vpn concentrator. The problem is that the concentrator will only allow 1 connection from the same source IP so that means only 1 of the 10 can connect to the corporate network at any given time. How can I set this up so that they can all connect at the same time
0
Comment
Question by:jffisher
6 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 33727098
If you enable nat-traversal, it may fix that problem.
It also may be a limitation of the router at the hotel that it can only support only 1 VPN connection to any one endpoint
0
 
LVL 17

Accepted Solution

by:
Kvistofta earned 250 total points
ID: 33727766
If you with "concentrator" mean Cisco 3000-series VPN-concentrator I would suggest you to upgrade to a Cisco ASA-box because the VPN3000 is end of life and end of support. With an ASA you can use SSL-VPN with Cisco Anyconnect client were you wont have problems like these, which exists because of limitations within ipsec in conjunction with nat.

/Kvistofta
0
 

Author Comment

by:jffisher
ID: 33727847
Thanks Guys, I will consider the ASA.
LRmoore's solution seams to be dependent on the Hotel network admin which as we know in most cases is not very supportive.
Any other suggestions, ??
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 
LVL 79

Assisted Solution

by:lrmoore
lrmoore earned 250 total points
ID: 33727964
Allow NAT-Traversal over TCP as well as over UDP on the concentrator.
It may still be a limitation of the hardware at the hotel.
Agree that SSL based solution such as with the ASA will fix the problem permanently.
0
 
LVL 5

Expert Comment

by:shirkan
ID: 33749821
I dont think the hotel network has anything to do with that. If the concentrator only allows 1 IP per VPN Client then that is it. There is not anything you can do on the hotel side.

Technically, if you would have alot of public IP's at the hotel available you could nat each client to a different outside address, but it is unlikely the hotel has that and it would mean alot of configuration on the hotels router.

For the ASA its the same (instead of the concentrator) if you set it up to only allow 1 IP per client (although i am not sure if the ASA can do that) the result is the same. Effectively its the endpoint that needs to allow more than 1 IP.
0
 

Author Closing Comment

by:jffisher
ID: 33844720
Both good answers.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Hi there, This article summarizes what you need if you are going to set up your home or small business Network Attached Storage (NAS) to be accessible from the internet. Of course there are configuration differences based on your NAS or router ma…
Before I go to far, let's explain HA (High Availability) and why you should consider it.  High availability is the mechanism used to provide redundancy to any service at the same site and appears as a single service to the users of that service.  As…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now