HI ,

I agree with jorge,

config seems to be fine

Just enable (config)#crypto isakmp nat-t

and check connectivity

also check whether (config)#sysopt connection permit vpn is there in the config

Regards,

Pradhuman

Hi,,

Thanks for your prompt response. I have included both commands advised in all replies but no success. I noted the when I check for 'ipsec sa' statistics on the ASA, the packet are getting decrypted  BUT not encrypted. I am wondering if this is a good clue??

Many thanks again.

Could you post output of what you have seen on  the ipsec sa..

while the vpn client is connected post output of

show crypto ipsec sa

also provide output of   show vpn-sessiondb remote

Please also load  your ASA  ASDM real time log  and observe log while RA client pings hosts on the inside .

make sure that the system the  RA client is trying to access  on the inside  network 192.168.1.0  do not have firewall turned on such as Windows firewalls etc.

Rgds

HI ,

It seems that the packets are not getting encrypted from the ASA itself as you are only seeing decrypts counts but no encrypt count!

The issue is likely to be with Routing or NAT-ing on the ASA

Just do a packet tracer from any internal ip to the VPN pool IP and checdk where the packet is getting dropped?

packet-tracer input inside icmp 192.168.1.x 0 8 192.168.2.x det

paste the output of this command or you can also do it from GUI??

Thanks,

Pradhuman