<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<title>Making QuickVPN Client Work With Pix Firewall</title>
<style>
<!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Verdana;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML Preformatted Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New";}
span.EmailStyle17
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.HTMLPreformattedChar
        {mso-style-name:"HTML Preformatted Char";
        mso-style-priority:99;
        mso-style-link:"HTML Preformatted";
        font-family:"Courier New";}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1><pre><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What are you VPNing to? On a Cisco pix you must put a “crypto isakmp nat-traversal” command into the host vpn config to allow remote client VPN connections from devices on a network where they are NAT’ed out to the Internets.<o:p></o:p></span></pre><pre><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></pre><pre><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>-Go0se<o:p></o:p></span></pre><pre><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a
href="http://atc.go0se.com">http://atc.go0se.com</a><o:p></o:p></span></pre>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
cisco-voip-bounces@puck.nether.net [mailto:cisco-voip-bounces@puck.nether.net] <b>On
Behalf Of </b>Jim Reed<br>
<b>Sent:</b> Friday, May 29, 2009 1:20 PM<br>
<b>To:</b> cisco-voip@puck.nether.net; ask-icd-ivr-support@external.cisco.com<br>
<b>Subject:</b> [cisco-voip] Making QuickVPN Client Work With Pix Firewall<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><b><span style='font-size:10.5pt;
font-family:"Verdana","sans-serif"'>Since there are a lot of very, very smart
people out there, I'm putting this out there to see if any of you latent
geniuses have figured this out.<br>
<br>
We're trying to make the LinkSys QuickVPN Client work from behind a PIX
firewall — including 501 and 506E -- that is running PAT. If we set
the computer up outside the firewall, it works just fine. When we put it
behind the firewall, it indicates it is making a connection and says its
applying the policy and then hangs on verifying network.<br>
<br>
Just wondered if anyone else had tried this and was able to make it work.<br>
<br>
We’ve been beating our heads against the wall on this all morning but
really don’t mind doing that because it feels so good when we quit.
However, it’s now getting to the point where it doesn’t feel
good when we quit!<br>
<br>
Thanks in advance, gang...<br>
</span></b><span style='font-size:7.5pt;font-family:"Verdana","sans-serif"'>-- <br>
Jim Reed<br>
Swift Communications, Inc.<br>
970-683-5646 (Direct)<br>
775-772-7666 (Cell)</span><o:p></o:p></p>
</div>
</body>
</html>