Hello everybody. Need your help. I have some problem with Cisco Easy VPN Client working. I will explain:
I have configured router Cisco3945 as Easy VPN server. I have two ISP accordingly to two subinterfaces. I assigned "crypto map"
to the first subinterface and it worked properly and could access to the allowed networks. Now I want to assign "crypto map" to the second subinterface, but I have some problem: VPN Client terminated(connected), but I can't access to the allowed networks. What will be the problem, do you have any experience?
here is the configuration:
crypto isakmp client configuration group aaa
key ****
pool aaa
acl 102
!
crypto ipsec transform-set 3des-sha esp-3des esp-sha-hmac
!
crypto dynamic-map VPNclientmap 1
set transform-set 3des-sha
!
crypto map VPNclientmap isakmp authorization list groupauthor
crypto map VPNclientmap client configuration address respond
crypto map VPNclientmap 1 ipsec-isakmp dynamic VPNclientmap
!
ip local pool aaa 192.168.11.2 192.168.11.3
!
access-list 102 permit ip 192.168.0.0 0.0.0.255 host 192.168.11.2
access-list 102 permit ip 192.168.0.0 0.0.0.255 host 192.168.11.3
access-list 102 permit ip 192.168.185.0 0.0.0.255 host 192.168.11.2
access-list 102 permit ip 192.168.185.0 0.0.0.255 host 192.168.11.3
!
When I assign "crypto map" to this subinterface it works properly:
interface GigabitEthernet0/0.101
encapsulation dot1Q 101
ip address XX.XX.XX.236 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
standby 0 ip XX.XX.XX.238
standby 0 priority 200
standby 0 preempt
crypto map VPNclientmap
When I assing "crypto pam" to the next subinterface, VPN Client terminated(connected), but allow network is not accessable:
interface GigabitEthernet0/0.292
encapsulation dot1Q 292
ip address XX.XX.XX.11 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
standby 0 ip XX.XX.XX.12
standby 0 priority 200
standby 0 preempt
crypto map VPNclientmap
See also attached VPN Client statistics.
