VPN client unable to access network

Unanswered Question
May 10th, 2008
User Badges:

concentrator is connected with core switch and server 172.28.31.171(server) is also connected in core switch.


InterVLN routing is working fine. server and conncentrator is able to reach other via core switch.



concentrator private Ip address 172.28.31.92/248

VPN POOL: 172.28.31.128/248

Core switch Ip address is 172.28.31.91






Client is able to connect without any problem, but client not able to ping or connect with any network device.


In VPN session i can see bytes send and receive. My LAN-2-LAN tunnles are working fine without any problem.



No firewall involoved in the path between the concentrator and desired server 172.28.31.171.




Both connected on same switch but different VLAN. Inter VLAN routing is working and both are able to ping.




ONly remote access client 172.28.31.128/248 is not able to reach anywhere.






Core switch routing table


ip route 172.28.0.0 255.255.0.0 172.28.31.68

ip route 172.28.0.0 255.255.224.0 172.28.31.77

ip route 172.28.31.128 255.255.255.248 172.28.31.92

ip route 172.28.32.50 255.255.255.255 172.28.31.92

ip route 172.29.0.0 255.255.0.0 172.28.31.68






Concentrator routing table


172.28.31.160 255.255.255.224 via 172.28.31.91

172.28.92.0 255.255.255.0 via 172.28.31.91

172.29.0.0 255.255.0.0 via 172.28.31.91

192.168.0.0 255.255.0.0 via 172.28.31.91

172.28.31.170 255.255.255.255 via 172.28.31.91



Split tunnel is enable for


172.28.31.88/0.0.0.7

192.168.0.0/0.0.255.255

172.29.0.0/0.0.255.255

172.28.92.0/0.0.0.255

172.28.31.170/0.0.0.0

172.28.31.171/0.0.0.0





  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
wasiimcisco Mon, 05/12/2008 - 09:09
User Badges:

I have already enabled the split tunneling if you see my post, it will be clear there, i have even tested with NAT-T, though there is no firewall but still not able to access the network.


I m getting this message in vpn


received an unencrypted packet when crypto active!! Dropping packet.



though public filter is allowing but dont know what is wrong

Actions

This Discussion