Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1217
  • Last Modified:

Cisco Router 881 VPN with Vodafone 3G Card

Hi experts,
we have setup an Cisco 881 an it works fine. Our problem is, if you try to build up a vpn-connection with a vodafone 3g card, the vpn-connection is established but you cannot ping our local network. I think it must be a problem with ipsec over UDP because Vodafone is doing IPSec over an adress translation. Has anyone solved the problem?
0
it-solutions
Asked:
it-solutions
  • 6
  • 6
1 Solution
 
Istvan KalmarCommented:
Hi,

In this case you need to enable NAT-T on vpn concentrator!

Best regards,
Istvan
0
 
Rick_at_ptscintiCommented:
just to be clear....you are trying to connect to the 881 remotely via the Cisco VPN client using a cellular connection on the host PC?
0
 
it-solutionsAuthor Commented:
Hi, Thank you for your quick answers..

@Rick_at_ptscinti:
Yes, thats´s the case. If we connect whithout using the 3G-network it works fine.

@ikalmar:

Do you have a workaround to enable NAT-T on Cisco 881?
Isakmp nat-traversal 20 isn´t a valid command for this router.

Best regards,

it-solutions
0
WatchGuard Case Study: NCR

With business operations for thousands of customers largely depending on the internal systems they support, NCR can’t afford to waste time or money on security products that are anything less than exceptional. That’s why they chose WatchGuard.

 
Istvan KalmarCommented:
try it:

crypto ipsec nat-transparency udp-encapsulation

But in this case you need to enable it on the central SITE!

Best regards,
Istvan
0
 
it-solutionsAuthor Commented:
What do you mean with "need to enable it on the central site"?
0
 
Istvan KalmarCommented:
ahh the central sit is the 881?
0
 
it-solutionsAuthor Commented:
Yes, the central site is the 881, and we try to buildup a vpn-connection over vodafone 3g with Cisco VPN-Client 5.x.
0
 
Istvan KalmarCommented:
ok...

in this case you need to enable nat-t:
crypto ipsec nat-transparency udp-encapsulation
0
 
Istvan KalmarCommented:
but some ios it is defaultly enabled...

what shows the log on the router?
did you tried to debug?
deb cry isa
deb cry ips
0
 
it-solutionsAuthor Commented:
Hello,

i debug, but there are no error messages. The connection is established, the VPN Client has got the IP-address 16.16.16.4, mask 255.255.255.0 and default gateway 16.16.16.1, but the local network 192.168.20.0 is not responding by ping.
The VPN works fine whithout using Vodafone as ISP.
0
 
Istvan KalmarCommented:
I think vodafone blocking ESP?
0
 
it-solutionsAuthor Commented:
Hello @All:

The problem is fixed!!!

It is caused by NDIS6.2 interface for WWAN, in this case Windows 7 32-bit  OS and Cisco VPN-Client 5.0. You will find the fix at: http://www.citrix.com/lang/English/lp/lp_1680845.asp

Thank you for quick and kindly support.

Best Regards

it-solutions
0
 
it-solutionsAuthor Commented:
Solution created in cooperation with Vodafone Business Support Germany
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 6
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now