IPSEC-ESP / Netgear / other router?

My comapny is rolling out a VPN solution that looks like it requires
inbound support for IPSEC-ESP. I currently have a Netgear DG841 DSL router
and I can get the VPN working by setting up a prot forwarding to a fixed IP
address.

The problem is that I don't want to use fixed IPs and the Netgear router
provides no way to wildcard the IP address specification.

Does anyone have a router that does allow this? If so I'd be interested if
you've used it for IPSEC-ESP inbound traffic and your general views on the
router.

Thanks.



Chris.

On Tue, 20 Jan 2004 10:47:49 +0000 (UTC), Chris Trueman
<(E-Mail Removed)> wrote:

>My comapny is rolling out a VPN solution that looks like it requires
>inbound support for IPSEC-ESP. I currently have a Netgear DG841 DSL router
>and I can get the VPN working by setting up a prot forwarding to a fixed IP
>address.
>
>The problem is that I don't want to use fixed IPs and the Netgear router
>provides no way to wildcard the IP address specification.

Don't you forward the outside ports to an internal ip address?

> Don't you forward the outside ports to an internal ip address?

I was surprised that I had to. When I set up the port forwarding to the IP
address of the machine running the VPN client - I got a connection. When I
disabled the port forwarding, I couldn't get a connection. That suggests
to me that our VPN server was trying to open a connection to the VPN client
software.

Anyways, my company modified the VPN server software and now it works
without the port forwarding.

Thanks for you help.


Chris.