Solved

How to allow multiple users in a hotel, using Cisco VPN client software, to connect to the company Cisco VPN Concentrator

Posted on 2010-09-21
6
583 Views
Last Modified: 2012-05-10
I have 10 users at a hotel all using a cisco vpn software client to connnect to the corporate vpn concentrator. The problem is that the concentrator will only allow 1 connection from the same source IP so that means only 1 of the 10 can connect to the corporate network at any given time. How can I set this up so that they can all connect at the same time
0
Comment
Question by:jffisher
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 33727098
If you enable nat-traversal, it may fix that problem.
It also may be a limitation of the router at the hotel that it can only support only 1 VPN connection to any one endpoint
0
 
LVL 17

Accepted Solution

by:
Kvistofta earned 250 total points
ID: 33727766
If you with "concentrator" mean Cisco 3000-series VPN-concentrator I would suggest you to upgrade to a Cisco ASA-box because the VPN3000 is end of life and end of support. With an ASA you can use SSL-VPN with Cisco Anyconnect client were you wont have problems like these, which exists because of limitations within ipsec in conjunction with nat.

/Kvistofta
0
 

Author Comment

by:jffisher
ID: 33727847
Thanks Guys, I will consider the ASA.
LRmoore's solution seams to be dependent on the Hotel network admin which as we know in most cases is not very supportive.
Any other suggestions, ??
0
Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

 
LVL 79

Assisted Solution

by:lrmoore
lrmoore earned 250 total points
ID: 33727964
Allow NAT-Traversal over TCP as well as over UDP on the concentrator.
It may still be a limitation of the hardware at the hotel.
Agree that SSL based solution such as with the ASA will fix the problem permanently.
0
 
LVL 5

Expert Comment

by:shirkan
ID: 33749821
I dont think the hotel network has anything to do with that. If the concentrator only allows 1 IP per VPN Client then that is it. There is not anything you can do on the hotel side.

Technically, if you would have alot of public IP's at the hotel available you could nat each client to a different outside address, but it is unlikely the hotel has that and it would mean alot of configuration on the hotels router.

For the ASA its the same (instead of the concentrator) if you set it up to only allow 1 IP per client (although i am not sure if the ASA can do that) the result is the same. Effectively its the endpoint that needs to allow more than 1 IP.
0
 

Author Closing Comment

by:jffisher
ID: 33844720
Both good answers.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question