Cisco VPN client for FreeBSD

Question

FreeBSD

Good day!

There is a connection diagram:

Cisco VPN client for Windows
|
FreeBSD
|
Internet
|
The piece of iron Cisco

VPN client is not connected. If we remove the FreeBSD link, it connects.

On the freight forwarded UDP ports 500 and 4500 through natd to a PC with a Cisco VPN client. The same ports + ESP resolved in ipfw. Still doesn't want to connect.

Tell me, what else can be my file? I will dump traffic with and without fryaha only in the evening. Maybe someone came across, again.

Answer 1

Cisco VPN client can work in three modes - normal (using AH / ESP protocols, and UDP 500 in my opinion), NAT-T (using UDP ports 500/4500) and tunneling (using TCP 10000)
Enable NAT-T mode on the client - should work fine without port forwarding.

Answer 2

Look that port 10000 on TCP is not closed on an output if this port is configured on CISCO.

Answer 3

Thanks, comrades! I will sort this out. I made sure that there were no other directions for excavation.

Answer 4

tcpdump output to pastebin possible?