Multiple VPN clients behind home router
in [Cisco]
|
Prev: L3 interface on 4948
Next: Dynamic and static NAT
From: Rob on 27 Apr 2010 16:12 RC <not-a-real(a)ddress.com> wrote: > > > "Rob" <nomail(a)example.com> wrote in message > news:slrnhte7l6.4ik.nomail(a)xs8.xs4all.nl... >> RC <not-a-real(a)ddress.com> wrote: >>> I've got 2 Windows PCs with the Cisco VPN Client behind a home/Linksys >>> router. They can both individually establish VPN connections back to my >>> ASA >>> and everything works great. But if they both try to connect via VPN at >>> the >>> same time the second one effectively disconnects the first. I don't think >>> it's >>> an issue with the ASA config. Is there a particular brand/model of small >>> business/Home router that will allow multiple VPN connections to the same >>> location? I'd rather not put in an ASA at the user's home. >>> Thanks in advance >> >> Small Draytek routers and modem/routers can setup IPsec VPN by themselves. >> You can connect them directly to a Cisco. You can specify a subnet and >> it will route all traffic from/to the subnet. No software needed on >> the systems. You may need a config change on the Cisco. > > We only do site-to-site VPN when the other site is an actual office, not a > home worker. I already have to remind them that the laptop is not to be used > by their kids/family imagine if I had open switch ports just begging to be > used. Actually on a Draytek you can configure the switch ports into different VLANs and specify which ones can use the VPN tunnel and which ones have only internet access. So the kids can plug in their PC on the same router but not have access to the company LAN. Of course it can be sabotaged.
From: RC on 29 Apr 2010 12:04 Anyone else have suggestions on how to solve this problem? "RC" <not-a-real(a)ddress.com> wrote in message news:h%EBn.116837$NH1.66142(a)newsfe14.iad... > I've got 2 Windows PCs with the Cisco VPN Client behind a home/Linksys > router. They can both individually establish VPN connections back to my > ASA and everything works great. But if they both try to connect via VPN at > the same time the second one effectively disconnects the first. I don't > think it's an issue with the ASA config. Is there a particular brand/model > of small business/Home router that will allow multiple VPN connections to > the same location? I'd rather not put in an ASA at the user's home. > Thanks in advance
From: Nick on 30 Apr 2010 04:47 In message <BBiCn.49658$0_7.2586(a)newsfe25.iad>, RC <not-a-real(a)ddress.com> writes >Anyone else have suggestions on how to solve this problem? > >"RC" <not-a-real(a)ddress.com> wrote in message >news:h%EBn.116837$NH1.66142(a)newsfe14.iad... >> I've got 2 Windows PCs with the Cisco VPN Client behind a >>home/Linksys router. They can both individually establish VPN >>connections back to my ASA and everything works great. But if they >>both try to connect via VPN at the same time the second one >>effectively disconnects the first. I don't think it's an issue with >>the ASA config. Is there a particular brand/model of small >>business/Home router that will allow multiple VPN connections to the >>same location? I'd rather not put in an ASA at the user's home. >> Thanks in advance > Just tried my Draytek Vigor 2820n. It accepted two active Cisco VPN client connections from here to the same Cisco box at the office. An extremely quick scan of the user manual indicates that two connections is the limit. There are other routers that do it - we got round a similar problem with a remote office of 3 or 4 PCs six or seven years ago - sorry, can't remember the brand we ended up using then, but it would have been mainstream and cheap. -- Nick (=----)
From: Jason on 3 May 2010 13:41
On Apr 30, 4:47 am, Nick <n...@----p.demon.co.uk> wrote: > In message <BBiCn.49658$0_7.2...(a)newsfe25.iad>, RC > <not-a-r...(a)ddress.com> writes>Anyone else have suggestions on how to solve this problem? > > >"RC" <not-a-r...(a)ddress.com> wrote in message > >news:h%EBn.116837$NH1.66142(a)newsfe14.iad... > >> I've got 2 Windows PCs with the Cisco VPN Client behind a > >>home/Linksys router. They can both individually establish VPN > >>connections back to my ASA and everything works great. But if they > >>both try to connect via VPN at the same time the second one > >>effectively disconnects the first. I don't think it's an issue with > >>the ASA config. Is there a particular brand/model of small > >>business/Home router that will allow multiple VPN connections to the > >>same location? I'd rather not put in an ASA at the user's home. > >> Thanks in advance > > Just tried my Draytek Vigor 2820n. It accepted two active Cisco VPN > client connections from here to the same Cisco box at the office. An > extremely quick scan of the user manual indicates that two connections > is the limit. There are other routers that do it - we got round a > similar problem with a remote office of 3 or 4 PCs six or seven years > ago - sorry, can't remember the brand we ended up using then, but it > would have been mainstream and cheap. > -- > Nick (=----) Yes, there is a command in the ASA VPN policy to allow more than 2 active connections. 2 is the default but you can change it to more. The command is: group-policy GROUPNAME attributes vpn-simultaneous-logins X |