VPN behind NAT and split tunnel?

[paarlberg]

I have a client that is trying to VPN to their network. Using the 4.x version of the Cisco VPN client they connect to all resources but are unable to access local network. They are using a private IP behind a NAT device. With the MS client, they are unable to split tunnel as well.

I used the same profile on the CVPN and have no problems with either the VPN network or local. It doesn't matter if I change the setting to not allow local network access, I still can. The opposite is true for the client trying to connect. They are not able to access the local network regardless of any changes being made.

Differences in our configurations.

Client:

Private IP

Windows XP Pro

My system:

Public IP

Win2k server

thanks

David

[drolemc]

IPSec does not encapsulate NetBIOS broadcast traffic and this is quiet often the root of such problems. For troubleshooting problems with accessing Local network resources, refer to the document at http://www.cisco.com/warp/public/471/vpn-net-hood.html