No internet access whilst connected to Cisco VPN client
We can’t browse the internet whilst our Cisco VPN client (v5.0.06.0160) is connected (to a Pix 515 firewall at a remote site). Initially we couldn’t connect to our LAN either so we followed these instructions to set up split tunnelling on the remote Pix.
1.Choose Configuration > VPN > General > Group Policy and select the Group Policy that you wish to enable local LAN access in. Then click Edit.
2.Choose the Client Configuration tab.
3.Uncheck the Inherit box for Split Tunnel Policy and chose Exclude Network List Below.
4.Uncheck the Inherit box for Split Tunnel Network List and then click Manage in order to launch the ACL Manager.
5.Within the ACL Manager choose Add > Add ACL...
6.in order to create a new access list.
7.Provide a name for the ACL and click OK.
8.Once the ACL is created, choose Add > Add ACE... in order to add an Access Control Entry (ACE).
9.Define the ACE that corresponds to the local LAN of the client.
b.Choose an IP Address of 0.0.0.0
c.Choose a Netmask of 255.255.255.255.
d.(Optional) Provide a description.
11.Click OK in order to exit the ACL Manager.
12.Be sure that the ACL you just created is selected for Split Tunnel Network List.
13.Click OK in order to return to the Group Policy configuration.
14.Click Apply and then Send (if required) in order to send the commands to the ASA.
This works fine except that our LAN reside on 2 networks (220.127.116.11/16 and 172.28.0.0/16) at opposite ends of a 10Mb dedicated link and the above config only gave us access to the network from which we made the VPN connection. As a result we changed 9.b. above, substituting 0.0.0.0/32 with both our network ranges and now we can access the remote network and our local networks when the VPN is connected but not the internet.
Can anyone else tell me what I need to add to get the internet as well? I sould point out that the VPN policy is giving out the correct IPs for the DNS servers here so I dont think it's a DNS issue.
Re: No internet access whilst connected to Cisco VPN client
Normally when you loose internet when connected with the VPN client is because split-tunneling is not configured.
You can choose from allowing the clients to have their own local internet connection or to send all traffic to the PIX (and reroute the traffic back to the internet).
If you want split-tunneling, you need to check the group-policy applied to the VPN clients and make sure that split-tunneling is configured (and only including the networks that you should reach through the tunnel).
Please post this:
sh run group-policy
sh run access-list NAME --> change name for the name of the ACL showing under the split-tunneling.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :