?
Solved

Cisco Conentrator

Posted on 2008-10-15
8
Medium Priority
?
292 Views
Last Modified: 2010-04-12
I have a cisco vpn conentrator 3005. i can connect to via vpn just fine from the cisco client software but i cannot ping any local ips or any server names over the vpn. i do have the split tunneling turned on but cannot figure out why i cannot ping or browse network folders.
0
Comment
Question by:chrisglissman
  • 5
  • 3
8 Comments
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22723141
Can you check and confirm if the IP subnet of the client is same as the IP subnet of the network behind Cisco device; if yes, this is the problem. You would need to change the IP subnet at one of the ends.

Also, I would like to check if there is a firewall on the local machine which is interrupting with the traffic flow and finally you have allowed traffic on the concentrator to the remote users.

Thank you.
0
 

Author Comment

by:chrisglissman
ID: 22723176
so what you are saying is if my local servers in my office are 10.0.1.1/24 my vpn clients have to be like 10.0.2.1/24????????
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22723343
That is correct; they both cannot be 10.0.1.x/24

Thank you.
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 

Author Comment

by:chrisglissman
ID: 22723491
how do i  allow traffic on the concentrator to the remote users?
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22723704
Sorry for the confusion; remote user access configuration is done on PIX/ASA not on concentrator.

Have you ensured that the client and network subnets are different.

Thank you.
0
 

Author Comment

by:chrisglissman
ID: 22724162
yes i have set up clients on the vpn3005 to get address 10.0.2.1- 10.0.2.30 i can connect but cannot ping any local 10.0.1.1/24 ips nor can i ping there names.
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22727945
No this is not what I meant when I specified that the remote clients should be on different subnet. Let me clarify:

Let's say a client "A" connects from home; he is having a Linksys router and the network he is on behind linksys is 10.0.1.0/24.
Noe let's say the user wants to create VPN to concentrator; he does that and as the network behind concentrator is also 10.0.1.0/24; he would successfully get connected but there would be no packet flow.

So, you need to change the IP subnet at one of the ends; normally we would change subnet at the Linksys end as it is easy to implement [but if you wish you can also change the IP subnet at concentrator end].
Please revert the virtual IP pool for the remote user on concentrator back to the range you had specified earlier [10.0.1.x]

Thank you.
0
 
LVL 32

Accepted Solution

by:
dpk_wal earned 1500 total points
ID: 22731597
0

Featured Post

NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Juniper VPN devices are a popular alternative to using Cisco products. Last year I needed to set up an international site-to-site VPN over the Internet, but the client had high security requirements -- FIPS 140. What and Why of FIPS 140 Federa…
Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question