[FW1] FW 4.0 - NAT (Cisco 827) - SecuRemote (key exch. OK/auth. not OK)

[Doumen Jan <jan.doumen@FW1-NOSPAMrecordgroup.be>]

Ave,

 

we have a Nokia IP 440 with FW-1 version 4.0 on the

central side, and a W2K with SecuRemote on the client

side. Network is accessed over an Alcatel ADSL modem.

Everything works fine.

 

Due to a change in requirements, we had to switch to

a Cisco 827 router, which performs NAT. Looks something

like this:

 

LAN -- FW1 -- router -- network -- 827 -- laptop

 

The 827 gets a dynamic IP address assigned from the

network provider. It translates this address into

another dynamic address which is given to the laptop.

 

When I set up a new site, I get key exchange. But

when I try to set passwords, I get a timeout saying

the firewall is not accessible.

 

I have changed the objects.C file on the firewall to

contain the two 'NAT'-lines, but that doesn't seem

to help.

 

What can be wrong? There is no filtering on the

827, so protocol 50 should in principle go through.

 

Greetings,

 

--
Jan Doumen                      netwerk/systeem beheer
RVS verzekeringen                    Tel: 02 728 95 24
Henri Matisselaan 16                 Fax: 02 728 91 88
B-1140 Brussel                         Url: www.rvs.be

 

This message may not be forwarded or cited without
prior permission from the author.