This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ipsec with no public ip

I want to connect two remote sites with ipsec. When the two local end point have a public ip address I can connect without problems.

Now, one of the remote site have no public ip address. The router have the public and all the packets that comes to the router by port 500 udp it pass to asl to the same port. In the other site the log says "we require peer to have ID 'public ip' but peer declares 'private ip'

Is not posible connect two remote sites if some of then not have a public ip?

Thanks

This thread was automatically locked due to age.

Parents

0 Puilla over 20 years ago

Maybe this can help understand it:

local network---ASL(public IP)- - - - -INET - - - - - router(public IP)---ASL(Private IP)---Local network.

Can I stablish a VPN site to site? Maybe with NAT-Traversal?
Cancel
Vote Up 0 Vote Down

Cancel
0 ReD-MaN over 20 years ago in reply to Puilla

NAt-traversal should help you out.
Cancel
Vote Up 0 Vote Down

Cancel
0 Puilla over 20 years ago in reply to ReD-MaN

Yes... but I don't know howto. I take all the day testing but don't work.

Must I forward ports 500 and 4500? What about the private Ip's. You only can configure the IP of the interface (private). You can't configure the public IP...
Cancel
Vote Up 0 Vote Down

Cancel
0 pablito over 20 years ago in reply to Puilla

I think you'll have to make the private IP side the initiator of the VPN. The public IP side will have "Any, Dynamic IP" as the remote point config. I assume that your router is doing NAT so unless you can configure the router to port forward you'll have trouble. Easier to let one end (end with private IP) make the connection. This config works for me when I activate Nat one both ASLs.
Cancel
Vote Up 0 Vote Down

Cancel
0 Puilla over 20 years ago in reply to pablito

Hi Pablito:

Thank you. Mil gracias. Now is working with your solution. Tanks again.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Puilla over 20 years ago in reply to pablito

Hi Pablito:

Thank you. Mil gracias. Now is working with your solution. Tanks again.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Mischel over 20 years ago in reply to Puilla

Please could you explain me your configuration and add logs of both ASL. I have the same configuration as you so, I have big problem ... See Subject "NAT-T and IKE rekeying". Thanks for help.
Cancel
Vote Up 0 Vote Down

Cancel