Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Browsing Issue

Hi,I have a pix 501 setup like the config below.

My problem is that although the vpn clients can connect and see exchange, ping names and get resolution to ip and connect to terminal server with no problem. However, when I try and go to \\server\share it cannot find it. If I try and pig anything but the server it fails.

Any idea's?

Thanks for any help you can give

cheers

Andy

nameif e0 outside sec0

nameif e1 inside sec100

int e0 10baset

int e1 10full

ip add inside 10.0.2.1 255.255.0.0

ip add outside PIX_EXTERNAL_IP 255.255.255.248

no fixup protocol smtp

domain-name domain.local

hostname FIREWALL

route outside 0 0 ROUTER_IP 1

static (inside,outside) SMTP_IP 10.0.0.2

access-list inbound permit tcp any host SMTP_IP eq smtp

access-group inbound in interface outside

en pass XXX

pass XXX

telnet 10.0.0.2 255.255.255.255 inside

http server enable

pdm history enable

http 10.0.0.2 255.255.255.255 inside

ip local pool VPNPOOL 192.168.1.1-192.168.1.10

access-list 101 permit ip 10.0.0.0 255.255.0.0 192.168.1.0 255.255.255.0

nat (inside) 0 access-list 101

sysopt connection permit-ipsec

no sysopt route dnat

crypto ipsec transform-set VPNTRANSFORM esp-des esp-md5-hmac

crypto dynamic-map VPNDYN 10 set transform-set VPNTRANSFORM

crypto map VPNCRYPTO 10 ipsec-isakmp dynamic VPNDYN

crypto map VPNCRYPTO interface outside

isakmp enable outside

isakmp identity address

isakmp policy 10 authentication pre-share

isakmp policy 10 encryption des

isakmp policy 10 hash md5

isakmp policy 10 group 2

isakmp policy 10 lifetime 86400

vpngroup VPNGROUP address-pool VPNPOOL

vpngroup VPNGROUP idle-time 1800

vpngroup VPNGROUP password XXX

vpngroup VPNGROUP wins-server 10.0.0.2

vpngroup VPNGROUP dns-server 10.0.0.2

vpngroup VPNGROUP default-domain domain.local

vpngroup VPNGROUP split-tunnel 101

2 REPLIES
Bronze

Re: VPN Browsing Issue

Check your WINS / LMHOSTS configuration. Also you could try \\IPaddress\share and see if it works, to isolate if it is a WINS resolution issue or the reachablility issue.

New Member

Re: VPN Browsing Issue

\\ipaddress\share doesn't work.

as far as I am aware wins is fine - there is nothing in lmhost as the machine is a blank. I tried it from a fresh install and after I had added it to the domain and then unplugged it.

WINS must be the problem then?

thanks for your help mate.

cheers

Andy

87
Views
0
Helpful
2
Replies
CreatePlease login to create content