I'm trying to build a project for a customer of mine, he has a cisco router as a perimeter firewall/router (827 ADSL router). This router does NAT (he has a single external IP address), and inside the LAN there is another server that acts as a VPN Server (l2tp/ipsec). So this VPN server has no direct connection to the internet (it has a private IP Address), any connection to outside he mades is through the 827 router.
My customer wants his remote users to use this VPN Server, and so I have to publish the VPN server in the Cisco Router. From what I have read, I had to publish 500, 4500 udp ports and also protocol esp.
So my conf would look like this:
ip nat inside source static esp x.x.x.x interface Dialer1 ip nat inside source static udp x.x.x.x 500 y.y.y.y 500 extendable ip nat inside source static udp x.x.x.x 4500 y.y.y.y 4500 extendable
(x.x.x.x would be my internal VPN Server IP address, and y.y.y.y would be the external and public 827 IP address)
What is my problem? That this is not working... something is wrong, but our remote vpn users cannot connect. What is wrong?
Thank you very much!