Cisco IOS - Remote Access VPN - unwanted route problem

Answered Question
Aug 13th, 2008
User Badges:

Hello there

I have run into a problematic scenario recently: I am trying to connect from a remote LAN (using a Cisco VPN client on my windows xp machine) to my office LAN and access one server there. The problem is that I need access to the entire remote LAN at the same time.

Remote LAN:

Office LAN:


(ME: - (multiple subnets form - (Internet Cloud) - (VPN-Gateway) - ( - (TARGET:

To provide the access, I configured a simple remote-access VPN on an 1700 series router. This is the relevant part:


crypto isakmp client config group group-remote-access

key my-group-key

pool vpn-address-pool

acl 100

ip local pool vpn-address-pool

access-list 100 permit ip host


The configuration works fine, in that I can access the server whenever I need to. However, the problem is that when the VPN link is connected, Windows somehow wants to route any packet destined for through the VPN tunnel! This is apparently due to a static route which added by the Cisco VPN Client along with all the other VPN-specific routes.

I suspect the culprit is the IP LOCAL POOL, since when the VPN is connected, the VPN Client debug log shows something like "Adapter Connected, address". Emphasis on the "/16" part. I checked the status page for the VPN connection and the only route specified there was "" under Remote Routes. Local Routes was empty.

Is this a known problem that I missed the obvious solution for? Is there any workaround aside from moving the local vpn pool into the 10.x.x.x or 192.168.x.x range? Thank you in advance for any tips or hints!

Correct Answer by Daniel Voicu about 8 years 11 months ago


The best way is to avoid any overlap between the local LAN and the VPN pool.

Try, is also private IP space:

Please rate if this helped.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)


This Discussion