Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

2 SR520's with H/W VPN and Windows 7 doesn't work

Hello all,

I have 2 SR520's with a hardware VPN established. I have Windows XP Machines that work great in this setup, however, Windows 7 Machines aren't able to browse to all sites on the internet (i.e. Yahoo, Newegg, MSNBC, and others). The interesting part of this, is the Windows 7 machines resolve DNS to the sites, are able to ping and traceroute to the sites. They just won't open them in a browser.

Originally I was setting this up for a client, and I have replicated the issue in my lab.

I've attached my router configs for reference.

Any help is appreciated.

ED

4 REPLIES
Super Bronze

Re: 2 SR520's with H/W VPN and Windows 7 doesn't work

The following policy-map on Remote site should have the action of "inspect" instead of "pass":

policy-map type inspect sdm-permit_VT
class type inspect Easy_VPN_Remote_VT
  pass

Hope that helps.

New Member

Re: 2 SR520's with H/W VPN and Windows 7 doesn't work

Thanks Halijenn,

I'll try this first thing in the morning. FYI, I've also opened a TAC Incident, however, they were also confused as to why the XP machine worked as expected, where as the 7 box didn't.

Thanks again,

ED

New Member

Re: 2 SR520's with H/W VPN and Windows 7 doesn't work

That didn't take care of it.

ED

New Member

Re: 2 SR520's with H/W VPN and Windows 7 doesn't work

After many hours with TAC here is the solution. I have attached the before and after configs. I've highlighted the changes with "*****".

Great job to Andrew at Cisco TAC for hanging in there on this one, and thanks for the suggestions.

ED

226
Views
0
Helpful
4
Replies