This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cisco Client to Work Network

Hello,

What I am attempting to do I think should be a fairly common occurance, but I have been searching the forums for quite some time and have not been able to find any answers. Perhaps I am just misunderstanding terminology.

I am using Astaro V7.401 in a Home configuration. I have a laptop that belongs to my employer with which I connect via VPN to their network. The client is of type Cisco VPN (running on Ubuntu 8.10). I don't want to connect my whole internal network to work, just the one laptop. Most of the examples that I see in the forums as well as knowlegebases seem to be connecting networks together.

Would someone be willing to point me in the right direction in the Webmin client on how to set this up?

Thanks,

Nathan Hokanson

This thread was automatically locked due to age.

0 BAlfson over 16 years ago

Nathan, If you can connect when you are not behind the Astaro, then you only need to set up a packet filter rule, probably using the IPSec network group: 'Internal (Network) -> IPSec -> Any : Allow'.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 16 years ago in reply to BAlfson

I've also had to add a rule for customers that added the IPSec-NAT-T (as defined on a default install of V7) service outbound as well... I believe it depends on how the Cisco stuff is configured, but you may have to add it. If, for some reason, you can't find the default service definition, it's UDP, Source Ports 1024:65535, destination port 4500.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to BrucekConvergent

Bruce, I think Astaro has listened to you in the past - in the newer releases, the IPSec group does include NAT-T.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 16 years ago in reply to BAlfson

Sorry, I missed that you said network group! For the OP, make sure you pick the group and not just the IPSEC service.
Cancel
Vote Up 0 Vote Down

Cancel
0 nathanhokanson over 16 years ago in reply to BAlfson

Bob,

Thanks so much for the quick reply. I will try it once I get home today!

Nathan
Cancel
Vote Up 0 Vote Down

Cancel
0 nathanhokanson over 16 years ago in reply to BAlfson

Worked like a charm, Bob!

Thank you SO much for such a quick response. Even though I have been only using Astaro for a little over a week, I am sold! Now to become a beta tester so I can get the power user license. [:D]

Nathan
Cancel
Vote Up 0 Vote Down

Cancel