| Roveer 2004-10-16, 8:45 pm |
| I'm setting up a Netgear FVS318 for VPN and have run into a problem.
Using documentation from their VPN client I was able to set up the
router and VPN software and get it so sucessfully establish a VPN
tunnel when I used a dial-up ISP on my laptop. I then took my laptop
into the office where it sits behind a Checkpoint VPN-1 Edge router
that does NAT. When trying to connect from that location I would get
to state 2 authentication (using the VPN Event viewer) and then it
would do a few retries then eventually fail. I went looking in the
documentation and found a NOTE in page C-5 in the VPN documentation
that said if you were going to use the VPN client behind a NAT
firewall that you had to reserve and always use the same address on
the home router. I put that address (in the case of the office laptop
it was a 10.200.1.103) address into the "Remote Lan start IP" field
and selected "tunnel can access a single remote address". When I
tried again, it connected up just fine and I've been VPN'ing all
morning.
The problem with this is, when I take this laptop away from the office
network it's likely to get 192 address's other 10. address etc and the
VPN will not work.
What is the correct settings (both Router and VPN client) to get this
to function properly? 0.0.0.0 doesn't seem to work behind NAT.
Thanks for the help.
Regards,
Roveer
|