VPN - Strange problem

john.irizarry · ‎10-11-2009

Hello,

I'm running into a strange problem where I have installed the VPN client (5.0.05.0290) on a several PC's and when I try to access the local network using ICMP, I cannot ping the local LAN addresses. I install the same client on another PC and ICMP to my local LAN works just fine.

I've installed the client on both XP sp2 and Vista machines. The problem seems to happen more on an XP box however. It is hit and miss. I installed the client on 8 PC's running XP and on 4 of them, I cannot ping the local network.

I have reinstalled the client, disabled the adapter, flushed the dns, still cannot access the local network on 4 machines.

Thoughts?

pstebner10 · ‎10-12-2009

Are you only trying ICMP? I would suggest checking the Windows firewall settings on the pcs that are having the issue. More often than not I see ICMP blocked by the local firewall.

Paul

john.irizarry · ‎10-13-2009

I thought the same thing, but I tried that and still nothing. Funny thing is I can try to VPN into another ASA and connect just fine with the same PC that does not work on another ASA.

pstebner10 · ‎10-13-2009

John-

Hmmmm. Have you tried watching real-time traffic via the ASDM on the ASA in question while attempting to connect with one of the troublesome pcs to see if anything is being dropped?

Also, any chance your dynamic crypto map is configured differently on this particular ASA as compared to the others?

Paul

john.irizarry · ‎10-13-2009

Um.... got it!! I changed this entry

no crypto isakmp nat-traversal to

crypto isakmp nat-traversal

and the PC's now work!!! Go figure.

pstebner10 · ‎10-13-2009

John-

Good news. It's usually the easiest thing imaginable!

Paul