VPN Client Connects but no Remote Network Access

Unanswered Question

I have one user who is unable to Access Remote Network resources when connected to the VPN on his home network.  VPN shows connected and he is given a remote IP from the VPN Pool, but he cannot ping any IP on our network.  When connected using Sprint Wi-Fi card he is able to connect and access remote network from the same laptop.  Maybe there is some network overlap that I am missing. 

Please see attached firewall config (zzz... being firewall public IP) and remote user route table. 

ASA 5505

VPN Client 

Your help is much appreciated.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
CSCO11543336 Fri, 02/15/2013 - 10:51
User Badges:

Is the User Router table printed out while connectiong from Sprint or your network?  I would also start by comparing the user route table in both connection modes

CSCO11543336 Fri, 02/15/2013 - 11:05
User Badges:

Based on your first post, the tunnel comes up.  That tells me udp port 500 is not blocked.

Andrew Phirsov Fri, 02/15/2013 - 11:17
User Badges:
  • Silver, 250 points or more

Is everything correct with routing from your internal network back to the vpn address-pool subnet?

Yes, I believe the routing is correct, VPN Statistics is showing Secured Routes to our two internal networks ( and  Tunnel Detail shows Bytes received but none Sent.  I don't believe there is any network overlap either, user is given a address and we assign a address from the VPN Pool.

I ran across this document https://supportforums.cisco.com/docs/DOC-10272, when I tested it failed on port 500. 


This Discussion