Solved

Cisco Router 881 VPN with Vodafone 3G Card

Posted on 2011-02-20
13
1,182 Views
Last Modified: 2012-05-11
Hi experts,
we have setup an Cisco 881 an it works fine. Our problem is, if you try to build up a vpn-connection with a vodafone 3g card, the vpn-connection is established but you cannot ping our local network. I think it must be a problem with ipsec over UDP because Vodafone is doing IPSec over an adress translation. Has anyone solved the problem?
0
Comment
Question by:it-solutions
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 6
13 Comments
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34938743
Hi,

In this case you need to enable NAT-T on vpn concentrator!

Best regards,
Istvan
0
 
LVL 3

Expert Comment

by:Rick_at_ptscinti
ID: 34938762
just to be clear....you are trying to connect to the 881 remotely via the Cisco VPN client using a cellular connection on the host PC?
0
 

Author Comment

by:it-solutions
ID: 34940282
Hi, Thank you for your quick answers..

@Rick_at_ptscinti:
Yes, thats´s the case. If we connect whithout using the 3G-network it works fine.

@ikalmar:

Do you have a workaround to enable NAT-T on Cisco 881?
Isakmp nat-traversal 20 isn´t a valid command for this router.

Best regards,

it-solutions
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34940818
try it:

crypto ipsec nat-transparency udp-encapsulation

But in this case you need to enable it on the central SITE!

Best regards,
Istvan
0
 

Author Comment

by:it-solutions
ID: 34940887
What do you mean with "need to enable it on the central site"?
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34940969
ahh the central sit is the 881?
0
 

Author Comment

by:it-solutions
ID: 34941005
Yes, the central site is the 881, and we try to buildup a vpn-connection over vodafone 3g with Cisco VPN-Client 5.x.
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34941022
ok...

in this case you need to enable nat-t:
crypto ipsec nat-transparency udp-encapsulation
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34941038
but some ios it is defaultly enabled...

what shows the log on the router?
did you tried to debug?
deb cry isa
deb cry ips
0
 

Author Comment

by:it-solutions
ID: 34941114
Hello,

i debug, but there are no error messages. The connection is established, the VPN Client has got the IP-address 16.16.16.4, mask 255.255.255.0 and default gateway 16.16.16.1, but the local network 192.168.20.0 is not responding by ping.
The VPN works fine whithout using Vodafone as ISP.
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34941761
I think vodafone blocking ESP?
0
 

Accepted Solution

by:
it-solutions earned 0 total points
ID: 34941805
Hello @All:

The problem is fixed!!!

It is caused by NDIS6.2 interface for WWAN, in this case Windows 7 32-bit  OS and Cisco VPN-Client 5.0. You will find the fix at: http://www.citrix.com/lang/English/lp/lp_1680845.asp

Thank you for quick and kindly support.

Best Regards

it-solutions
0
 

Author Closing Comment

by:it-solutions
ID: 34986384
Solution created in cooperation with Vodafone Business Support Germany
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ISP Change 14 70
2 routers and 1 public IP Address. 10 60
Public DNS  Vs BGP 20 55
Routing certain SSLVPN Traffic to CDN 1 22
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question