Solved

Can't ping servers, remote desktop into servers after connecting to internal network from home using cisco vpn client access

Posted on 2011-09-18
2
487 Views
Last Modified: 2012-05-12
I have a Cisco ASA 5520 firewall and I have configured an IPSec VPN connection into this network.  I can connect up to this internal network from home and running an ipconfig command I see that I am picking up an IP address from this vpn connection that I setup.

However, I am not able to ping any internal servers or remote desktop into any of them.

There is no listing of a default gateway when I run the ipconfig /all command after I connect up, so this seems like a likely culprit. Also, I am not sure if the DNS servers I specify in this connection should be an external DNS servers or my own internal DSN servers within the network I am connecting to.

Any thoughts as to the most likely causes as to why I can't access anything from inside the network after I connect into this work network from home and what I would do to fix this problem?

Thanks for your input.
0
Comment
Question by:skenny10
2 Comments
 
LVL 18

Accepted Solution

by:
jmeggers earned 500 total points
ID: 36557907
There are two good possibilities. One, you haven't advertised the VPN address pool so that the hosts you are pinging know where to send the response. Second, you may be attempting to NAT traffic going out the ASA to the client when it should be excepted from NAT. You would do that with the "NAT (inside) 0...." command.  The details of the config vary based on the code you're running, it's very different in 8.2 and earlier from 8.3 and later.
0
 

Author Closing Comment

by:skenny10
ID: 36582796
thanks
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Hit router interface limit 7 40
Cisco 887VA secondary outgoing IP Address diferent from Default Dialer 4 34
Cisco RV042G 4 7
WLC and radius 4 11
When I upgraded my ASA 8.2 to 8.3, I realized that my nonat statement was failing!   The log showed the following error:     %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows It was caused by the config upgrade, because t…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question