access VPN from the same intranet

Toggle sidebar Toggle sidebar
S

soldier89757

Aug 27, 2018
4
0
10
I've built a XL2TP+IPSEC VPN server on a vps. I've found that my VPN server will become unstable if there are 3 clients in a intranet accessing the VPN server at the same time.When this phenomenon happen，clients can not connect to the server or unable to access the internet even if succeeding connecting to the server. Can someone tell me how to solve the problem？
 
Sort by date Sort by votes
B

bill001g

Titan
Aug 9, 2012
28,319
2,754
125,640
It has been a while since i ran multiple ipsec sessions. I know there were issues when multiple machines where connecting to the same location when they were behind the same nat.

It is some restriction with how NAT-T works....sorry its been a long time I forget what can be done to resolve this.
 
Upvote 0 Downvote
S

soldier89757

Aug 27, 2018
4
0
10

NAT-T?? is it a setting option in ipsec configure file?
 
Upvote 0 Downvote
S

soldier89757

Aug 27, 2018
4
0
10

Yes,the VPS is outside.I'm using ios and windows built-in client and I never set up client's router manually,so I think that the fault probably consists in the server.However, since you think that a bad router may cause this problem,could you tell me in detail.
 
Upvote 0 Downvote
B

bill001g

Titan
Aug 9, 2012
28,319
2,754
125,640
NAT-T is the work around they came up with for ipsec to pass through a router running nat. IPSEC running in the most secure mode will not allow something in the path to manipulate the port numbers which prevents the session from even establishing.

If you search nat-t and multiple machine you will see lots of discussion of this issue. Most times people just give up and use sslvpn which tolerates nat much better
 
Upvote 0 Downvote
S

soldier89757

Aug 27, 2018
4
0
10

what path？I've just known that NAT-T means IPSEC NAT Traversal protocol but I don't know what "path" means. Could you explain it.
 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom