Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
589
Views
0
Helpful
7
Replies

VPN Remote Client Unable to Ping network Devices

hill.kevin
Level 1
Level 1

‎05-22-2008 05:59 AM

I have an ASA 5505 setup for VPN remote access. I have 3 users setup the same. Two users are able to get in and view devices on the network. The third user is able to connect to the router but cannot ping anything on the inside. Any ideas?

Labels:
0 Helpful
7 Replies 7

andrew.prince
Level 10
Level 10

‎05-25-2008 02:03 PM

Kevin,

Have you allocated enough IP address in the Pool?

Have you allowed "split-tunneling"? if so - the remote users network may be the same as the internal?

When that user is connected, can you connect to them?

Have you tried using that users credentials and tested remotely?

HTH.

0 Helpful

hill.kevin
Level 1
Level 1
In response to andrew.prince

‎05-31-2008 08:26 PM

I have been able to log on with that users credentials. I have noticed that, even with my credentials, there are some locations that allow me to log on but not allow access to the internal network. Could it be restrictions from equipment at the remote locations?

Kevin

0 Helpful

andrew.prince
Level 10
Level 10
In response to hill.kevin

‎06-01-2008 01:57 AM

Kevin,

It is more likley that the IP address you are coming from has the recstrictions associated. I would suggest you get into contact with the teams that manage those devices and ask them the question of they are blocking?

HTH.

0 Helpful

hill.kevin
Level 1
Level 1
In response to andrew.prince

‎06-02-2008 12:19 PM

Can you tell me what kinds of things they might be blocking that would cause this issue?

Kevin

0 Helpful

jcarrillo6
Level 1
Level 1

‎06-01-2008 06:28 AM

One possibility could be that the user has a multihomed nic. Make sure he only has one IP address on the cleint machine. if there are other IP addresses on a different network, the proxy addresses will not match.

0 Helpful

hill.kevin
Level 1
Level 1
In response to jcarrillo6

‎06-02-2008 12:22 PM

These are standard laptop computers. Can these be multihomed?

Kevin

0 Helpful

jcarrillo6
Level 1
Level 1
In response to hill.kevin

‎06-03-2008 10:15 AM

Any machine running windows XP can be multihomed if not running DHCP. You can email me directly if you want help troubleshooting your config: jcarrillo@colosecure.com

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents