[c-nsp] VPN Concentrator 3005 - block connection from internal clients

[Bob Fronk]

*Sorry if you get this multiple times. For some reason I keep getting
rejected*

 

We have a Cisco VPN 3005 Concentrator.

 

Traveling Windows clients use Cisco VPN Software (pointed to a public
Internet IP) to connect from outside sources.

 

However, when they come to the office, the Concentrator accepts the
connection because the IP is public.  This causes several problems because
they are both connected on LAN and VPN.

 

This does not happen on the internal local subnet that the Concentrator is
on, however, if the client connects to the LAN at one of our remote sites
(connected via MPLS), the Concentrator accepts the connection.

 

I am not very versed on the VPN Concentrator.  How can I tell it not to
accept connections from clients originating from our LAN? 

 

 

 

Bob Fronk

bobfronk at gmail.com