Keep in mind tht it is a different license, and so is the An圜onnect for Mobile. They use a Verizon Aircard to get Internet, then the Cisco An圜onnect to VPN to the office, then they launch the Cisco IP Communicator softphone, and they can answer helpdesk calls from the beach. The An圜onnect client is excellent and we use it here for our techs. You don't mention what you are using at the hub side of the VPN tunnel, but if it is a Cisco ASA there are tools such as Packet Tracer built-in that can assist you with troubleshooting, and wizards to assist with configuring different types of VPN. Also, run traceroute from your end to the user IP and look at the results. With the user connected to the VPN, you can have them run a traceroute to the VPN endpoint and internal servers and see where it fails.
So, the next step I would look at is my routing tables and ACLs. It doesn't look like an issue with an ISP (to me).
The above indicate the establishment of the VPN tunnel. Does this mean the cellular Internet device was purchased a few days ago and you are trying to configur it for the first time? Or it stopped working a few days ago? You say "This happend a couple of days ago, and im out of ideas". He recive a IP from VPN pool, but i cant ping that IP. He got a 4G stick wich he connect to internet with. This doesn't use any special protocols and you should be fine connecting from most anywhere. If this continues to be a problem then you could consider using an SSL VPN (Cisco An圜onnect) instead. If this VPN config worked from other locations then your own firewall is most likely not at fault and the problem lies with the ISP on the other side. This means that if an ISP hasn't specifically enabled GRE or ESP, those packets (with the actual encrypted information meant to be sent over the VPN) will get dropped.įrom what you describe, it sounds like this is what's happening in your case. Unfortunately, best practice for a firewall configuration is to block everything by default and only allow traffic on specific TCP or UDP ports. If an ISP were consciously blocking VPN traffic, then they would probably firewall those TCP/UPD ports and the connection would never be established. If you use the VPN Client to create a PPTP or L2TP connection then the initial connection is set up using TCP and UDP protocols, but once a connection is established, the VPN traffic uses GRE or ESP protocols to encapsulate encrypted traffic.
0 kommentar(er)
