Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN 3005 Concentrator

I have a client set up and connects great to the VPN. Once my session is established I can ping the pc itself and the VPN public/private interfaces but nothing else. Nothing on the Network or out on the internet. I can't even ping the gateway or tunneling gateway.

4 REPLIES
Cisco Employee

Re: VPN 3005 Concentrator

Hi,

How are you assigning ip address to the clients. If you are using a Pool of ip addresses, does your internal router has a route back to the VPN3000 for this pool of addresses.

Is the VPN3000 configured for Split tunneling. If you want the users to go to the internet while connected to the VPN3000, you need to enable split tunneling or you can tunnel everything and route the packets to the internet through a different device.

Regards,

Arul

New Member

Re: VPN 3005 Concentrator

No the router doesn't have a route back VPN 3000, how do I do that. How do you do split tunneling. What I hate about this 3005, is that it is either Menu driven or Gui, no command line. It makes it that much harder to trouble shoot.

Cisco Employee

Re: VPN 3005 Concentrator

Hi,

If you are assigning a pool of addresses 10.1.1.1-10.1.1.254, we need to make sure that your internal network is aware of this range and routes the packet back to the VPN3000 for this 10.1.1.x/24 subnet.

If you are using a Cisco Router, you can do:

ip route 10.1.1.0 255.255.255.0

Regarding split tunneling:

1. You need to create a network list which includes the subnets that you want the users to have access to.

2. And assign this network list to the group.

You can also refer the below URLs for detail info:

http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/3_6/config/polmgt.htm#xtocid10

http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/3_6/config/usermgt.htm#xtocid39

Regards,

Arul

New Member

Re: VPN 3005 Concentrator

I want to thank you for your help. I did end up fixing the problem myself I guess I should have been a little more patient with my self and waited, not wasting your time. The problem was sort of easy, I wouldn't have thought it would have caused as much problems but it did. I am not sure if I should feel idiotic about it. I had the vpn working last thursday, but it was that one finite thing that I overlooked.

Thanks.

212
Views
0
Helpful
4
Replies
CreatePlease to create content