GB3000 VPN client to Dynamic external interface

[victor]

I have the IP of 1.1.1.1 as the remote network in both the firewall and the client. It is a dynamic IP as it is utilizing the Sprint service.

[Dwight]

Originally Posted by victor

I am not sure what exactly you are asking? The client is running on a laptop connected to a Sprint Blackberry. It uses Sprint network for Internet access. The IP Address is coming from them for the public IP.

Do I need a private IP issued to the client? If so how do you assign? I have a DHCP server at 10.5.2.1/16. When I do an ipconfig /all I do not see any other addresses assigned to the client.

Since you are using ATT Blackberry - You may try using force NAT-T on your client. This is in either phase 1 or phase 2 of the client configuration. ATT may be block ESP.

I would also try on some other NIC besides through blackberry.

Next, you may wish to look at demo.gta.com for how user is defined using the default objects.

Users
Name: Joe Sales
Description: Mobile User
Group: <Users>
Remote Identity: jsales@gta.com
Method: Password
Remote Network: 192.168.100.1

Group
Name: Users
Description: Default group
Authentication Required: No
VPN Object: Standard Dynamic
Local Network: <FW Networks - PRO>

Object -
Name: FW Networks - PRO
Description: Networks associated with protected interfaces
Type: Surf Sentinel, Network, Security Policies, VPN
Index Object Address Description
1 IP 192.168.71.0/24 PROTECTED