Remote Access VPN routing problem

[HAFIZ AHMED]

We have configured Remote Access VPN in Cisco 2600 router. But the problem is user can easily authenticate & connected to VPN device but they cant ping the internal file server or workstations.

For your convenience here I attached the sh tech & diagram of the present scenario.

I need your assistance to resolve this problem

Regards,

Ruben

[Daniel Voicu]

Hi Ruben,

Try the following:

1. remove "aaa authorization network groupauthor local" then give it a try

2. remove "ip cef" then try again

If still doesn't work, try to capture the console messages on the Router and post it.

Please rate if this helped.

Regards,

Daniel

[michicano]

Ruben,

In this doc - I don't see your access-list for the VPN traffic. It is possible that you are not including the correct traffic for this tunnel so that may be why your users can't PING the internal file server or workstations.

Carlos

[dominic.caron]

Hi !

If you try to ping from the connected client the internal router interface, does it work ?

If it doesnt work, do a debug ip icmp to see if the router is receiving the packet.

post results....

[HAFIZ AHMED]

Thanks for your reply.

I have applied the folowing command but still reamin the same prob

# access-list 101 permit ip 192.168.16.0 0.0.0.255 14.1.1.0 0.0.0.255

# crypto isakmp client configuration group tvclgr

# acl 101

Regards,

Hafiz Ahmed