I have a Cisco PIX 515E and I am connecting to it with Cisco VPN Client 4.8 from one of my sites. The VPN Connection get established, howver i cannot ping any IP Address within the network. This only seems to be a problem with the one connection as I can connect and ping perfectly from my laptop. The site has other Cisco VPN Connections to connect to other locations that are working perfectly, but mine is the only site they are having trouble connecting to. What could possibly cause this connection issue?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
when you talk about "connections", do you have a seperate vpngroup setup for each client or does each client use the same vpngroup? To further elaborate, if you go into the Cisco VPN Client, click your connection and click Modify, does each "connection" use the same vpngroup name and password to connect? Or does each have their own vpngroup name and password?
also, I do realize that your get connected, but I am trying to verify if you use the same vpngroup and password for all of your sites. This is important because connecting environments can be different, therefore they may need a little "tweaking" to get working.
So, you do have ICMP packets enabled on your PIX? You are able to get ping replies on your other client connections?
I do receive ping replies from my test machine when I connect using the same vpngroup that the remote site is using. My test machine is behind a linksys router. I don't have the "enable transparent tunneling" checked. I am thinking it could be a setting on the remote site's firewall, but I don't have access to that firewall to verify the firewall config, but the remote site is telling me that they connect to other PIX firewalls without issue using the same pc as they are using now.
Let me get this striaght,
you have 2 vpn clients/PC's both using the cisco VPN client and connecting to a PIX you do not control.
One can ping, one cannot.
On client is behind a linksys, one is not.
have you tried putting your laptop behind the linkssys to see if it pings?
Are both Cisco clients set to use the same authentication group?
If not it sounds like they have two different groups and one is ont configured properly.
After you connect to to the cisco client and look under Status, Statistics.
See if the routes are the same and the other settings on both clients. I
Keep in mind that even if the are identical they could have a filter applied to ICMP at the end based on the client source address.
Here is the situation,
I have a remote site and a local test site (my laptop). The test site is behind a linksys router and the remote site, I believe, is behind a Cisco Firewall. I do have control over the PIX at my end, which is what the VPN clients are connecting to, but I do not have control over the firewall at the remote site. I can ping anywhere in my internal network from the local test site through the VPN, but I cannot from the remote site, even though the VPN connection is being established. Both the local test site and the remote site are using the same vpngroup and and configured the same way.
I just received the route print and ipconfig info from the remote site and it looks like all the routes from the VPN are being set correctly, but still no connectivity. The remote site cannot ping my internal address or even access a web page inside the network.
something doesn't sound quite right... I still don't have a completely clear picture of what's happening...
You are on a LAN behind a PIx. The remote site is on their own LAN behind a different PIX. You are trying to use Cisco VPN client from a pc within your LAN to connect to their PIX and gain access to their LAN. And they are using Cisco VPN client to connect to your PIX and gain access to your LAN. Is any of that correct?
Mark
I am on a LAN behind a pix, but my local test site is behind a linksys router in another location. I'm not sure if the Remote site has a PIX, ASA, or just a router, I don't have any control over their hardware, but the site is telling me that there is nothing wrong on their end because they have similar connections working with other sites using the Cisco VPN Client from the same PC on their LAN. The remote site is using the Cisco VPN Client to connect to my LAN. The connection is only one way. They need access to my LAN, but I am not connecting to theirs at all.
I have a similar problem. I am a real neophite when it comes to CISCO as I inherited this setup. I do know how to access the GUI to the firewall and have checked to be certain tunnelling is enabled and dns is also split enabled. Can you assist with a translation of where the items would be in the GUI
Business Accounts
Answer for Membership
by: mark-waPosted on 2007-12-13 at 10:07:26ID: 20466159
For this VPN Group, do you have a DNS entry and WINS entry in the config?
for Example:
vpngroup vpn3000 dns-server 192.168.0.1
vpngroup vpn3000 wins-server 192.168.0.1
I had this exact same problem and I added these entries (with the correct group name and ip for the dns and wins servers of course) and then I could ping
If this is not your issue, remove and re-enter your config for this vpngroup.
Mark