Hi All,
I have a Cisco 1721 Router configured as an EzVPN Server and trying to connect using a Cisco 3.6.3 VPN Client.
The problem is that i get connected fine and also get a IP Address. The remote Subnet also appears in my Cisco Client , however i cannot ping etc any other device on the Remote Subnet (i.e. connected to Cisco 1721).
Setup is
172.28.2.x---Cisco 1721----Public IP Address-----Cisco Client
IP Pool=172.28.5.x
Relevant 1721 Config is
hostname naman-router
!
!
username naman secret 5 xxxxxxxxx
clock timezone PST -8
clock summer-time PDT recurring
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
aaa authorization network mylist local
aaa session-id common
ip subnet-zero
no ip source-route
!
!
ip domain name xxxx.com
crypto isakmp policy 1
authentication pre-share
group 2
!
crypto isakmp policy 2
hash md5
authentication pre-share
group 2
crypto isakmp identity hostname
crypto isakmp client configuration address-pool local mypool1
!
crypto isakmp client configuration group yyyyyy
key xxxxx
dns 172.28.2.10
wins 172.28.2.10
domain xxxxx.com
pool mypool1
acl 121
!
!
crypto ipsec transform-set myset esp-des esp-sha-hmac
crypto ipsec transform-set myset1 esp-des esp-md5-hmac
!
crypto dynamic-map mymap 1
set transform-set myset1
reverse-route
!
!
crypto map mymap client authentication list default
crypto map mymap isakmp authorization list mylist
crypto map mymap client configuration address respond
crypto map mymap 1 ipsec-isakmp dynamic mymap
!
!
!
!
interface Ethernet0
ip address x.x.x.x 255.255.255.192
no ip redirects
half-duplex
no cdp enable
crypto map mymap
!
interface FastEthernet0
ip address 172.28.2.1 255.255.255.0
no ip proxy-arp
speed auto
!
ip local pool mypool1 172.28.5.1 172.28.5.100
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.x
no ip http server
no ip http secure-server
!
access-list 121 permit ip 172.28.2.0 0.0.0.255 any
!
!
!
