I have an employee that has XP Home edition and another with W2K Pro. Either one can connect and be authenticated using VPN to a 3015 concentrator. After they connect they can not ping any internal network box via IP or by name. I have watched the logs on the concentrator and they look fine. I have about 20 other users that are doing this just fine. Both of these users are connected directly to the cable modem and if we take a laptop that is working it works just fine connected to their cable modems.
If they are behind NAT/PAT please check the settings on the VPN client and the group they connect too. Also afterthe client connects you can check session to see what Protocol/Encryption says. IN case of client behind NAT you need to check ipsec through NAT settings
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...