Recently one of our client has provided the VPN to us for conencting. Its a Cisco vpn client. The vpn connects fine, but after connecting, the remote desktop to the servers does not works.
to brief about the setup, the users are lying in a vlan, created on a Cisco ASA 5520. We have a access-list on that firewall allowiing full ip traffic to the client's vpn gateway. After that there is another perimeter firewall allowing access to Internet. On that we have done a static one-to-nat for the user machine trying to connect to that vpn.
When the user is int the vlan behind the Cisco ASA 5520, the vpn connects but remote desktop does not works. But once we move the machine out of the vlan to the normal network out of the firewall Cisco ASA 5520, the vpn connects and remote desktop as well works fine.
Below are the logs i have captured which are relevant to the problem. Please suggest how can this issue be solved. Sicne we have to have those machines in the vlan.
Ideally, VPN connectivity is tested from devices behind the endpoint devices that do the encryption, yet many users test VPN connectivity with the ping command on the devices that do the encryption. While the ping generally works for this purpose, it is important to source your ping from the correct interface. If the ping is sourced incorrectly, it can appear that the VPN connection has failed when it really works. If ping works continuously then the problem can be that the xauth times out. Increase the timeout value for AAA server in order to resolve this issue.
For further information about troubleshoot the VPN connectivity click this link.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...