Solved

Cisco VPN

Posted on 2004-10-04
4
233 Views
Last Modified: 2010-04-17
I am able to have users VPN into our system but they can not browse the internet once they have VPN'd in.  They can do everything else but they can not access the internet, any ideas?
0
Comment
Question by:gtimmons
  • 2
  • 2
4 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 12219171
What is your VPN endpoint? A PIX? VPN 3000 series concentrator?
What version VPN client?
Either way, the answer lies in "split-tunneling"
VPN 3000 series:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a008015f324.shtml

PIX:
http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_user_guide_chapter09186a00801aed89.html
0
 

Author Comment

by:gtimmons
ID: 12219488
Pix 515 is our firewall
0
 

Author Comment

by:gtimmons
ID: 12219668
do I put the IP address of the internal network, 172.16.1.1, in for this?
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12220103
Yes, use something like this:

access-list split-tunnel permit ip 172.16.1.0 255.255.255.0 <VPN IP subnet> <mask>
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question