Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

VPN Client - Creates Tunnel, No Traffic

Sorry to have to post this with so many other vpn issues already posted that are similar. Yet none are identical.

Background: Cisco 2651 router with IP_FW_IDS PLUS IPSEC 3DES IOS. We have a site to site vpn tunnel already established between offices, which is working fine, and are now attempting to introduce client vpn capabilities to our staff. Using the Cisco software vpn client version 4.0.3F but are having issues.

Issue: I am able to connect, authenticate and establish the tunnel each time from multiple locations. However, from certain locations I am unable to "connect" to the internal network. No PING or any TCP/IP traffic and the VPN statistics say that "transparent tunneling" is "inactive". While other connections appear to work fine and I am able to PING and actually connect to the internal network. Those connection stats on vpn state that "transparent tunneling" is "active on UDP port 4500".

The only thing I have been able to confirm is this:

1)Attempting to establish a vpn connection from a public ip address (i.e. 208.45.133.23) allows me to create the vpn tunnel, but no traffic flows across the vpn.

2)When establishing a vpn connection from a private ip address (i.e. 192.168.1.50 or 10.10.10.50) I am able to create the vpn tunnel AND traffic is allowed to flow enabling me to connect to the internal network and ping internal addresses.

Question(s): 1)What may be conflicting and disallowing me to send traffic across the vpn?

2)What correlation is there between public ip addresses and disallowing traffic, and private ip addresses and allowing traffic, on an IOS FW/VPN?

Thanks in advance.

Dana

1 REPLY
Community Member

Re: VPN Client - Creates Tunnel, No Traffic

Thanks. Turns out it was an issue with the ACL.

119
Views
0
Helpful
1
Replies
CreatePlease to create content