Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

VPN Forms I get an IP but no traffic passes.... please help

Result of the command: "show run"

: Saved


ASA Version 8.0(2)


hostname asa


enable password names

name VPN


interface Vlan1

nameif inside

security-level 100

ip address


interface Vlan2

nameif outside

security-level 0

pppoe client vpdn group BELLSOUTH

ip address pppoe setroute


interface Ethernet0/0

switchport access vlan 2


interface Ethernet0/1


interface Ethernet0/2


interface Ethernet0/3


interface Ethernet0/4


interface Ethernet0/5


interface Ethernet0/6


interface Ethernet0/7


passwd encrypted

boot system disk0:/asa802-k8.bin

ftp mode passive

dns server-group DefaultDNS

domain-name access-list Split_tunnel_list standard permit

pager lines 24

logging enable

logging asdm informational

mtu inside 1500

mtu outside 1500

ip local pool INTERNAL VPN- mask

icmp unreachable rate-limit 1 burst-size 1

asdm image disk0:/asdm-602.bin

no asdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout uauth 0:05:00 absolute

dynamic-access-policy-record DfltAccessPolicy

http server enable 8080

http inside

http outside

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

no crypto isakmp nat-traversal

no vpn-addr-assign aaa

no vpn-addr-assign dhcp

telnet timeout 5

ssh timeout 5

console timeout 0

vpdn group BELLSOUTH request dialout pppoe

vpdn group BELLSOUTH localname vpdn group BELLSOUTH ppp authentication pap

vpdn username password *********

dhcpd auto_config outside


dhcpd address inside

dhcpd enable inside


threat-detection basic-threat

threat-detection statistics


class-map inspection_default

match default-inspection-traffic



policy-map type inspect dns preset_dns_map


message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns preset_dns_map

inspect ftp

inspect h323 h225

inspect h323 ras

inspect rsh

inspect rtsp

inspect esmtp

inspect sqlnet

inspect skinny

inspect sunrpc

inspect xdmcp

inspect sip

inspect netbios

inspect tftp


service-policy global_policy global


enable outside

csd image disk0:/securedesktop-asa-

svc image disk0:/sslclient-win- 1

svc enable

group-policy GroupPolicy1 internal

group-policy GroupPolicy1 attributes

vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn

split-tunnel-policy tunnelspecified

split-tunnel-network-list value Split_tunnel_list


url-list none

svc keep-installer installed

svc rekey time 30

svc rekey method ssl

svc ask enable

username Monkey password ********** encrypted

username Monkey attributes

vpn-group-policy GroupPolicy1

vpn-tunnel-protocol IPSec l2tp-ipsec svc

tunnel-group DefaultWEBVPNGroup general-attributes

address-pool INTERNAL

tunnel-group RAS type remote-access

tunnel-group RAS general-attributes

address-pool INTERNAL

default-group-policy GroupPolicy1

prompt hostname context


: end

what am I missing? I think its a no nat rule but I don't know how to correct this problem..

Thanks in advance

New Member

Re: VPN Forms I get an IP but no traffic passes.... please help

I think that the mtu on the outside interface may be part of the problem, try setting it to 1492.

I've only done this on a pix with 6.2 or something running on it and its a while ago.

nat (inside) 0 access-list no-nat

access-list no-nat permit ip

CreatePlease to create content