Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Can't ping servers, remote desktop into servers after connecting to internal network from home using cisco vpn client access

Posted on 2011-09-18
2
Medium Priority
?
491 Views
Last Modified: 2012-05-12
I have a Cisco ASA 5520 firewall and I have configured an IPSec VPN connection into this network.  I can connect up to this internal network from home and running an ipconfig command I see that I am picking up an IP address from this vpn connection that I setup.

However, I am not able to ping any internal servers or remote desktop into any of them.

There is no listing of a default gateway when I run the ipconfig /all command after I connect up, so this seems like a likely culprit. Also, I am not sure if the DNS servers I specify in this connection should be an external DNS servers or my own internal DSN servers within the network I am connecting to.

Any thoughts as to the most likely causes as to why I can't access anything from inside the network after I connect into this work network from home and what I would do to fix this problem?

Thanks for your input.
0
Comment
Question by:skenny10
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 18

Accepted Solution

by:
jmeggers earned 2000 total points
ID: 36557907
There are two good possibilities. One, you haven't advertised the VPN address pool so that the hosts you are pinging know where to send the response. Second, you may be attempting to NAT traffic going out the ASA to the client when it should be excepted from NAT. You would do that with the "NAT (inside) 0...." command.  The details of the config vary based on the code you're running, it's very different in 8.2 and earlier from 8.3 and later.
0
 

Author Closing Comment

by:skenny10
ID: 36582796
thanks
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
There’s a movement in Information Technology (IT), and while it’s hard to define, it is gaining momentum. Some call it “stream-lined IT;” others call it “thin-model IT.”
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question