03-11-2013 10:30 PM
Hi,
After configuring Cisco Easy VPN Server I was able to form connection between client and VPN Server. But still I am not able to ping the LAN IPs. I am using NAT and I have removed VPN client network from NATing.
IP address I am trying to ping is 10.0.0.2.
Below is the configuration.
crypto ctcp
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group imovation
key ********
pool SDM_POOL_1
acl 100
crypto isakmp profile ciscocp-ike-profile-1
match identity group imovation
client authentication list ciscocp_vpn_xauth_ml_1
isakmp authorization list ciscocp_vpn_group_ml_1
client configuration address respond
virtual-template 1
!
ip local pool SDM_POOL_1 172.16.11.2 172.16.11.10
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto ipsec profile CiscoCP_Profile1
set transform-set ESP-3DES-SHA
set isakmp-profile ciscocp-ike-profile-1
!
!
!
!
!
!
interface Loopback0
ip address 172.16.1.1 255.255.255.0
!
interface GigabitEthernet0/1
description ### LAN ###
ip address 10.0.0.1 255.255.255.0
no ip unreachables
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface Virtual-Template1 type tunnel
ip unnumbered Loopback0
tunnel mode ipsec ipv4
tunnel protection ipsec profile CiscoCP_Profile1
!
ip nat inside source list 101 interface Dialer1 overload
access-list 100 remark CCP_ACL Category=4
access-list 100 permit ip 10.0.0.0 0.0.0.255 any
access-list 101 deny ip 10.0.0.0 0.0.0.255 172.16.11.0 0.0.0.255
access-list 101 permit ip 10.0.0.0 0.0.0.255 any
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
Pls help.
Thanks in advance.
03-12-2013 12:14 AM
Kindly TurnOff windows Firewall.
Also check
172.16.11.x when assigned check its netmaks by using ipconfig/all.
*** Do Rate All Helpful Posts***
03-12-2013 12:46 AM
Hi Jawad,
Firewall is already off. I checked the netmask it was /16 and I have done the necessary changes. Now it is /24 but it still not working.
03-12-2013 03:34 AM
What Default Gateway of
10.0.0.2..
03-12-2013 03:57 AM
it is 10.0.0.1 (Router Interface). I have created a loopback ip in the router and i cant ping that ip too.
03-12-2013 12:24 PM
Have you defined default route in your router config.
03-12-2013 08:27 PM
Yes. It is "ip route 0.0.0.0 0.0.0.0 Dialer1"
03-12-2013 10:28 PM
Hi,
Can you ping the internal IP address of the Router (10.0.0.1)?
Thanks.
Portu.
03-12-2013 11:54 PM
crypto isakmp client configuration group imovation
key ********
pool SDM_POOL_1
no acl 100
Check by Removing ACL
and also in your PC add manual Routes 172.16.11.0.
also post
route print of your PC
03-13-2013 01:35 AM
no. I cannot ping 10.0.0.1 ip either.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: