Hi,
I have VPN clients connecting to my pix 515 v.6.3 using Nat-traversal ( aka IPSEC/udp ).
I have 2 wan interfaces. One interface is used to VPN site to site to different remote peers. The other interface is used to finish cisco vpn clients.
The cisco VPN clients are configured using IPSEC over udp ( nat-traversal ).
I have many different profiles for remote cisco vpn clients.
I see that some remote employees have problems with VPN clients using an specific dsl router. It seems there's a problem with nat translations in these routers.
I was reading vpnclient pdf and It suggest to change the method of the vpn client and configuring IPSEC over TCP ( port tcp 10000 ).
I would like to modify the PIX config to allow IPSEC over TCP, then I think that I must configure the command : no crypto isakmp nat-traversal
I would like to know if this command will brake my VPN site to site tunnels used in the other interface and if this will brake the current enviroment for the rest of the remote vpn clients ( cisco software ).
Alternatives are wellcome.
Thank you very much.
Best regards.
|
Similar Threads
