have set up a small home lab to test site to site and remote access vpn

on a cisco 1700 router where the remote office router (BRANCH) gets its

outside address dynamically assigned see attacment's for HQ router config

and network layout

whilst the site to site vpn works perfectly i have come across a problem

with the remote access side of things i can form a tunnel from the remote

access client to the HQ router and once the tunnel is up can connect with the

web server at 192.168.1.2 without any problems,but i can't access the shared

folders on the file server at 192.168.1.3 nor can i ping any addresses behind

the router.

this i can't figure out as there are no access-lists to filter the traffic

its not a share permission problem as the ntfs and share permissions on

the shared folders are set to everyone full control and the computer has

been configured with the correct default gateway.

has anybody any idea what could be causing this to happen?

yours completely stumped

Melvyn Brown

ps have run debug crypto ipsec and debug crypto isakmp commands when i try

to connect to the shared folders but there is no output from the router.