Solved

Cisco Router 881 VPN with Vodafone 3G Card

Posted on 2011-02-20
13
1,180 Views
Last Modified: 2012-05-11
Hi experts,
we have setup an Cisco 881 an it works fine. Our problem is, if you try to build up a vpn-connection with a vodafone 3g card, the vpn-connection is established but you cannot ping our local network. I think it must be a problem with ipsec over UDP because Vodafone is doing IPSec over an adress translation. Has anyone solved the problem?
0
Comment
Question by:it-solutions
  • 6
  • 6
13 Comments
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34938743
Hi,

In this case you need to enable NAT-T on vpn concentrator!

Best regards,
Istvan
0
 
LVL 3

Expert Comment

by:Rick_at_ptscinti
ID: 34938762
just to be clear....you are trying to connect to the 881 remotely via the Cisco VPN client using a cellular connection on the host PC?
0
 

Author Comment

by:it-solutions
ID: 34940282
Hi, Thank you for your quick answers..

@Rick_at_ptscinti:
Yes, thats´s the case. If we connect whithout using the 3G-network it works fine.

@ikalmar:

Do you have a workaround to enable NAT-T on Cisco 881?
Isakmp nat-traversal 20 isn´t a valid command for this router.

Best regards,

it-solutions
0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34940818
try it:

crypto ipsec nat-transparency udp-encapsulation

But in this case you need to enable it on the central SITE!

Best regards,
Istvan
0
 

Author Comment

by:it-solutions
ID: 34940887
What do you mean with "need to enable it on the central site"?
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34940969
ahh the central sit is the 881?
0
 

Author Comment

by:it-solutions
ID: 34941005
Yes, the central site is the 881, and we try to buildup a vpn-connection over vodafone 3g with Cisco VPN-Client 5.x.
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34941022
ok...

in this case you need to enable nat-t:
crypto ipsec nat-transparency udp-encapsulation
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34941038
but some ios it is defaultly enabled...

what shows the log on the router?
did you tried to debug?
deb cry isa
deb cry ips
0
 

Author Comment

by:it-solutions
ID: 34941114
Hello,

i debug, but there are no error messages. The connection is established, the VPN Client has got the IP-address 16.16.16.4, mask 255.255.255.0 and default gateway 16.16.16.1, but the local network 192.168.20.0 is not responding by ping.
The VPN works fine whithout using Vodafone as ISP.
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34941761
I think vodafone blocking ESP?
0
 

Accepted Solution

by:
it-solutions earned 0 total points
ID: 34941805
Hello @All:

The problem is fixed!!!

It is caused by NDIS6.2 interface for WWAN, in this case Windows 7 32-bit  OS and Cisco VPN-Client 5.0. You will find the fix at: http://www.citrix.com/lang/English/lp/lp_1680845.asp

Thank you for quick and kindly support.

Best Regards

it-solutions
0
 

Author Closing Comment

by:it-solutions
ID: 34986384
Solution created in cooperation with Vodafone Business Support Germany
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
allowing access to site to site VPN from virtual interfaces - ASA5510 41 59
Choice of router 8 32
Router disappearing from network on one pc 18 34
Deny permission ACL 16 26
Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

827 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question