Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Client troubles with second Windows IP Address

24 REPLIES

Re: VPN Client troubles with second Windows IP Address

hi

can u elaborate more about the problem which you are currently facing out there ??

regds

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

Sorry, for some reason my original message vanished.

My problem:

Windows XP, 2000 or NT allowes me to configure a additional IP-addresses on one interface (advanced IP-Settings)

I found that after configuring such an address and a router the cisco VPN-client is still setting up the tunnel, but no payload is going through the tunnel anymore.

I tried to allow split tunnel, but it didn't help.

Gold

Re: VPN Client troubles with second Windows IP Address

just wondering if the additional ip range is overlapping with the vpn client assigned ip range.

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

The IP-Addresses do not operlap.

On my XP-Sytem I have configured:

1st IP 128.0.34.24 255.255.0.0 GW 128.0.7.5

2nd IP 172.1.1.2 255.255.255.0 GW 172.1.1.1

Assinged Address for Cisco VPN client is 172.17.0.128

(172.1.1.1 is connecting to the internet and is a Cisco 800)

The cisco 800 is dialing perfectly.

Also the tunnel is established perfectly.

Just the payload is not transmitted.

Gold

Re: VPN Client troubles with second Windows IP Address

verify the pc routing table, do "route print" from dos prompt.

there should be an entry with destination to the remote vpn lan, and both gateway and interface are the vpn client assigned ip.

if no such route is found, maybe add one manually.

route add mask

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

The routing table is fine

There is a zero route to 172.17.0.128

0.0.0.0 0.0.0.0 172.17.0.128 172.17.0.128 1

127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1

128.0.34.24 255.255.255.255 127.0.0.1 127.0.0.1 1

128.0.255.255 255.255.255.255 128.0.34.24 128.0.34.24 1

172.1.1.2 255.255.255.255 127.0.0.1 127.0.0.1 1

172.1.255.255 255.255.255.255 128.0.34.24 128.0.34.24 1

172.17.0.0 255.255.0.0 172.17.0.128 172.17.0.128 1

172.17.0.128 255.255.255.255 127.0.0.1 127.0.0.1 1

172.17.255.255 255.255.255.255 172.17.0.128 172.17.0.128 1

217.16.34.12 255.255.255.255 172.1.1.1 128.0.34.24 1

224.0.0.0 224.0.0.0 172.17.0.128 172.17.0.128 1

255.255.255.255 255.255.255.255 128.0.34.24 128.0.34.24 1

Standardgateway: 172.17.0.128

By the way...thank you for trying to help me

Gold

Re: VPN Client troubles with second Windows IP Address

i tested it in the lab today and it works fine.

winxp sp2 with windows firewall off

vpn client v4.0.3(a)

lan 192.168.1.0/24

lan 172.16.8.0/24

remote 192.168.0.0/24

vpn client assigned ip 172.23.23.12

below is the pc routing table:

0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.201 20

255.255.255.255 192.168.1.201 192.168.1.201 1

127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1

172.16.8.0 255.255.255.0 172.16.8.1 192.168.1.201 20

172.16.8.1 255.255.255.255 127.0.0.1 127.0.0.1 20

172.16.255.255 255.255.255.255 192.168.1.201 192.168.1.201 20

172.23.0.0 255.255.0.0 172.23.23.12 172.23.23.12 10

172.23.23.12 255.255.255.255 127.0.0.1 127.0.0.1 10

172.23.255.255 255.255.255.255 172.23.23.12 172.23.23.12 10

192.168.0.0 255.255.255.0 172.23.23.12 172.23.23.12 1

192.168.1.0 255.255.255.0 192.168.1.201 192.168.1.201 20

192.168.1.201 255.255.255.255 127.0.0.1 127.0.0.1 20

192.168.1.255 255.255.255.255 192.168.1.201 192.168.1.201 20

224.0.0.0 240.0.0.0 172.23.23.12 172.23.23.12 10

224.0.0.0 240.0.0.0 192.168.1.201 192.168.1.201 20

255.255.255.255 255.255.255.255 172.23.23.12 172.23.23.12 1

255.255.255.255 255.255.255.255 192.168.1.201 192.168.1.201 1

Default Gateway: 192.168.1.1

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

This is really strange.

As soon as I use

172.1.1.2 as primary

and

128.0.34.24 as secondary IP-Address

I have the problem described.

After changing the secondary IP-Address to 192.168.1.2

everything worked find.

I cannot find any difference in the routingtable.

The only real difference is, that 128.0 is a real LAN with a lot of different clients

and 192.168.1 is just a network that I have created for test purposes (just one other client PC).

After I didn't find any differences in routingtable and in arp table the only difference i could think of is the number of broadcasts in the network. So I changed the subnetmask to 255.255.255.240 without any positive result.

The only big difference that I can find comparing your routing table with mine is the metrics.

In my routingtable it is always 1

In your routingtable i see sometimes 10 and 20

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

I was testing around a little bit and found some strange things.

After I was connecting the PC via cross over cable only with the Cisco 800 Router (to be sure that there is absolutely no external influence)

I have changed the ips like:

Pc1: 172.16.1.2/16 GW 172.16.1.1

Pc2: 192.168.1.2 GW 192.168.1.1

Cisco 800 on Ethernet 0 172.16.1.1

Everything workes fine.

Strange is, that if I use on the PC any other IP-Address (no matter if first of second) than 172 or 192 it does not work anymore.

First I thougnt that this has something to do with my using of public range 128.0.0.0/16 but also when I use any address out of 10.0.0.0 it does not work.

Could you please be so kind to check this in your lab? Just any address except of 192 or 172.

Gold

Re: VPN Client troubles with second Windows IP Address

you mentioned you've changed the ips like:

Pc1: 172.16.1.2/16 GW 172.16.1.1

Pc2: 192.168.1.2 GW 192.168.1.1

Cisco 800 on Ethernet 0 172.16.1.1

just wondering what the original, and i will let you know how the 2nd test go.

Gold

Re: VPN Client troubles with second Windows IP Address

it works regardless what ip range i use. i tried 10.x.x.x, 128.x.x.x, and 203.x.x.x.

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

Is it possible that our pix can cause the problem?

Gold

Re: VPN Client troubles with second Windows IP Address

when you have only 1 ip on the pc, do you have any issue connecting the vpn? if not, then i doubt the pix would be causing any problem.

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

If I only use 172.16.1.1 on the pc the tunnel will be established and I can ping the other side.

Only when I use 128.anythin

or 129. anything or 10. anything as a second IP-Address on the pc, then the tunnel will be established, but I cannot ping the other side.

Gold

Re: VPN Client troubles with second Windows IP Address

when there is no vpn established on the pc, verify the pc routing table whether there are already routes for those subnets other than the default route.

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

Hi

the destination network is 192.168.254.0/24

there is no route to this network.

I have absolutely no idea or expanation for this phenomenon.

If there is any chance I could open an Account for you on the pix to test it yourself.

Gold

Re: VPN Client troubles with second Windows IP Address

it's fine. please email me the login details jack.ko@tcsa.com.au

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

I did a final test and I think that you can reproduce this in your lab.

1st IP

192.168.1.9/24 GW:192.168.1.2

2nd IP

192.168.0.9/24

Tunnel will be established, but no ping through

After changing the second IP to

192.168.3.9

everything worked fine.

For me it seems as if the cisco client has some problems with zeros in the IP-address.

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

Can anyone...best would be ciscopeople...check if this is really a client problem?

I have a PC that needs exacly the addresses above and cannot connect using the cisco vpn client.

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

New Member

Re: VPN Client troubles with second Windows IP Address

Hi,

Just to let you know, I had exacly the same problem as described above - tunnel being set up but no data pass through - using VPN Client 4.0.5(A). On seeing this post, I removed the additional IP addresses from the interface and it now works fine.

I was using 10.210.211.211 and 192.168.0.10. The former is my private LAN, the latter was used to configure a new Linksys router and I left it there for future use. Routing tables seemed fine. The workaround of removing the second address is fine for me but its still very weird.

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

Anonymous
N/A

Re: VPN Client troubles with second Windows IP Address

180
Views
0
Helpful
24
Replies
CreatePlease login to create content