Re: OT: VPN Concentrator with VPN Clients

I had fun with 3030 in late 2003.

1. prioritize which method of IP ASSIGNMENT u are going to use - put it on
top of the list.
 e.g. per user, client specific , dhcp or pool range.
untick all others but one you selected. (it behaves funny if you use IPSEC
and have also ticked client specific. IPSeC doesn't support client
specific).

2. If you've this 3030 installed in DMZ, is there a pefect routing between
your other servers subnet and 3030?

3. have you tried authenticating locally, rather than MSAD?

-frog

On Thu, Oct 8, 2009 at 2:56 AM, Haroon <itguy.pro_at_gmail.com> wrote:

> Hello Experts,
>
> Sorry about back to back OT posts but maybe I am too dumb for this crap and
> someone can help me with this.... I am trying to configure CVPN 3030
> Concentrator to work with either Microsoft vpn client or Cisco VPN client
> 5.0.03.
>
> I have configured two groups: 1) pptp to work with MS and 2) IPSecGroup to
> work with the cisco vpn client. I cannot make any connection with ms vpn
> client, however, I am able to authenticate with active directory and get an
> ip address from our internal dhcp server when I use cisco vpn client(ip sec
> group). After the connection is established, I cannot ping or browse any
> servers behind the concentrator. I even tried different subnet dhcp range
> and adding static routes on the concentrator and router behind it (local
> LAN) but no go.
>
> I have tried following the cisco documents to the last letter, google
> search
> and I tried configuring it using my own understanding of this but no luck.
> Is there some setting that I am missing in the concentrator? I don't care
> which client I use (MS preferred) as long as concentrator can intelligently
> pass traffic through to the other side as it is with the 4 site to site
> VPNs.
>
> regards,
>
> Haroon
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sun Oct 11 2009 - 15:03:03 ART