Once connected to remote site VPN users can't go anywhere

Answered Question
Jun 30th, 2009
User Badges:

We have setup a remote site IPSEC vpn on Cisco ASA 5520's. When users connect via AT&T Air-cards, they are able to connect to VPN and get to internal servers and the internet (no split tunneling being used). When users are on local area network at home (behind wireless access points, firewalls) or in the office on LAN they can connect, but can't go anywhere (can't ping any internal server or internet).


We have verified that their is no private addressing conflict.


Does anyone have an idea of what could be causing this?


Thanks in advance,

Correct Answer by JORGE RODRIGUEZ about 7 years 9 months ago

Try enabling NAT-T on asa, have them try after you enable it.


PIX/ASA 7.1 and earlier


pix(config)#isakmp nat-traversal 20

PIX/ASA 7.2(1) and later


securityappliance(config)#crypto isakmp nat-traversal 20


http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#Solution1


Regards



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.

Actions

This Discussion