Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

cannot access Internet when connected to VPN

I've got a PIX 501 setup as a vpn remote server. I've been passing its DHCP options its getting from my ISP to its DHCP clients, including the default gateway. I inserted that default route statically, but it didn't help. What am I missing to get the VPN clients access to the Internet as well as to the VPN network without enabling split tunneling? Other than the IP address pool, I don't see where I can pass ip configuration parameters to VPN clients. I've attached my config.

Thank you,

Bill

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: cannot access Internet when connected to VPN

to configure split tunneling, you'll need to create an acl and apply it to the vpngroup.

e.g.

access-list split permit ip

vpngroup test address-pool vpn

vpngroup test dns-server 68.87.75.194 68.87.64.196

vpngroup test default-domain hsd1.pa.comcast.net

vpngroup test split-tunnel split

vpngroup test idle-time 1800

vpngroup test password ********

alternatively, if you don't prefer to configure split tunneling. one workaround is to deploy a proxy server at the head office, all remote vpn client then point to the proxy for internet browsing after vpn established.

another point needs to be noticed is that the vpn client pool shall not be under the same ip scheme as the pix inside subnet.

3 REPLIES
Gold

Re: cannot access Internet when connected to VPN

to configure split tunneling, you'll need to create an acl and apply it to the vpngroup.

e.g.

access-list split permit ip

vpngroup test address-pool vpn

vpngroup test dns-server 68.87.75.194 68.87.64.196

vpngroup test default-domain hsd1.pa.comcast.net

vpngroup test split-tunnel split

vpngroup test idle-time 1800

vpngroup test password ********

alternatively, if you don't prefer to configure split tunneling. one workaround is to deploy a proxy server at the head office, all remote vpn client then point to the proxy for internet browsing after vpn established.

another point needs to be noticed is that the vpn client pool shall not be under the same ip scheme as the pix inside subnet.

Community Member

Re: cannot access Internet when connected to VPN

Thank you, the split tunneling works, but in regard to setting up a different subnet for the vpn clients, after trying that, clients are unable to make a connection. Only after changing the pool to be part of the inside interface, are they able to connect. It gets to securing communication channel, and then just disconnect. The new configuration is attached. Keep in mind that I'm forwarding isakmp, esp, and ah traffic from a business cable modem to the outside interface of my pix, 10.1.10.10

Community Member

Re: cannot access Internet when connected to VPN

i finally figured out how to do this.

174
Views
4
Helpful
3
Replies
CreatePlease to create content