cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
509
Views
5
Helpful
4
Replies

NAT or ACL issue?

jeffreyhood
Level 1
Level 1

Hello,

I have a Cisco 850 running 12.4(2) with an existing L2L tunnel to another Cisco router. I am trying to add remote access to the Cisco 850 and I'm having, what I believe, is an ACL or NAT issue. I can connect to the 850 with the VPN client and get an address from the pool, but I can not ping in the internal network. Any help is appreciated. Here is my config:

1 Accepted Solution

Accepted Solutions

palomoj
Level 1
Level 1

Your NAT ACL 101 needs to deny IP from internal IP to remote VPN pool 10.2.199.x.

View solution in original post

4 Replies 4

palomoj
Level 1
Level 1

Your NAT ACL 101 needs to deny IP from internal IP to remote VPN pool 10.2.199.x.

Palomoj,

Thanks, that has me pointed in the right direction. I can know get replies to ping, but the replies are coming from the external IP of the router, not the 10.203.0.0 devices I am pinging on the LAN. Any more suggestions? Thanks again.

config t

access-list 111 permit ip 10.203.0.0 0.0.0.255

any

crypto isakmp client configuration group doctors

acl 111

Thanks Palomoi, that did it. Your help is appreciated.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: