Multiple VPN clients behind home router
in [Cisco]
|
Prev: L3 interface on 4948
Next: Dynamic and static NAT
From: RC on 27 Apr 2010 11:57 I've got 2 Windows PCs with the Cisco VPN Client behind a home/Linksys router. They can both individually establish VPN connections back to my ASA and everything works great. But if they both try to connect via VPN at the same time the second one effectively disconnects the first. I don't think it's an issue with the ASA config. Is there a particular brand/model of small business/Home router that will allow multiple VPN connections to the same location? I'd rather not put in an ASA at the user's home. Thanks in advance
From: Rod Dorman on 27 Apr 2010 13:25 In article <h%EBn.116837$NH1.66142(a)newsfe14.iad>, RC <not-a-real(a)ddress.com> wrote: >I've got 2 Windows PCs with the Cisco VPN Client behind a home/Linksys >router. They can both individually establish VPN connections back to my ASA >and everything works great. But if they both try to connect via VPN at the >same time the second one effectively disconnects the first. I don't think it's >an issue with the ASA config. Is there a particular brand/model of small >business/Home router that will allow multiple VPN connections to the same >location? I'd rather not put in an ASA at the user's home. Have you tried the "IPSec over TCP" setting? -- -- Rod -- rodd(at)polylogics(dot)com
From: Rob on 27 Apr 2010 13:28 RC <not-a-real(a)ddress.com> wrote: > I've got 2 Windows PCs with the Cisco VPN Client behind a home/Linksys > router. They can both individually establish VPN connections back to my ASA > and everything works great. But if they both try to connect via VPN at the > same time the second one effectively disconnects the first. I don't think it's > an issue with the ASA config. Is there a particular brand/model of small > business/Home router that will allow multiple VPN connections to the same > location? I'd rather not put in an ASA at the user's home. > Thanks in advance Small Draytek routers and modem/routers can setup IPsec VPN by themselves. You can connect them directly to a Cisco. You can specify a subnet and it will route all traffic from/to the subnet. No software needed on the systems. You may need a config change on the Cisco.
From: RC on 27 Apr 2010 15:59 "Rod Dorman" <rodd(a)panix.com> wrote in message news:hr76lf$inp$1(a)reader1.panix.com... > In article <h%EBn.116837$NH1.66142(a)newsfe14.iad>, > RC <not-a-real(a)ddress.com> wrote: >>I've got 2 Windows PCs with the Cisco VPN Client behind a home/Linksys >>router. They can both individually establish VPN connections back to my >>ASA >>and everything works great. But if they both try to connect via VPN at the >>same time the second one effectively disconnects the first. I don't think >>it's >>an issue with the ASA config. Is there a particular brand/model of small >>business/Home router that will allow multiple VPN connections to the same >>location? I'd rather not put in an ASA at the user's home. > > Have you tried the "IPSec over TCP" setting? > > -- > -- Rod -- > rodd(at)polylogics(dot)com This won't work without modifying the ASA config, or at least it doesn't work if all I do is change the client, and I'm hoping to find a solution that doesn't require a change to the ASA.
From: RC on 27 Apr 2010 16:06
"Rob" <nomail(a)example.com> wrote in message news:slrnhte7l6.4ik.nomail(a)xs8.xs4all.nl... > RC <not-a-real(a)ddress.com> wrote: >> I've got 2 Windows PCs with the Cisco VPN Client behind a home/Linksys >> router. They can both individually establish VPN connections back to my >> ASA >> and everything works great. But if they both try to connect via VPN at >> the >> same time the second one effectively disconnects the first. I don't think >> it's >> an issue with the ASA config. Is there a particular brand/model of small >> business/Home router that will allow multiple VPN connections to the same >> location? I'd rather not put in an ASA at the user's home. >> Thanks in advance > > Small Draytek routers and modem/routers can setup IPsec VPN by themselves. > You can connect them directly to a Cisco. You can specify a subnet and > it will route all traffic from/to the subnet. No software needed on > the systems. You may need a config change on the Cisco. We only do site-to-site VPN when the other site is an actual office, not a home worker. I already have to remind them that the laptop is not to be used by their kids/family imagine if I had open switch ports just begging to be used. |