Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN Client connects but can't VNC or ping any inside networks

I have a ASA5500, i have an outside user using Cisco VPN client to remote access into my network. They are able to connect and get an ip address from the pool. But they are unable to ping or VNC any devices inside my network. I have static routes on my cores and wan routers pointing back to the ASA. From the inside of my network i am also unable to ping any of the remotes clients ip addresses, any thoughts?

5 REPLIES
Cisco Employee

Re: VPN Client connects but can't VNC or ping any inside network

Is this the only user having connectivity issues or all users. Can you look under the statistics for packets Tx and Rx and also look at "show crypto ipsec sa" and check for packets encrypted/decrypted.

Also, please post the configuration if possible.

Regards,

Arul

** Please rate all helpful posts **

New Member

Re: VPN Client connects but can't VNC or ping any inside network

Could you tell me that the pool range is in same range with inside or not ?

Regards

Mozaffari

New Member

Re: VPN Client connects but can't VNC or ping any inside network

Are remote users behind nat device? Possibly a nat-t issue.

New Member

Re: VPN Client connects but can't VNC or ping any inside network

Darrick,

We had the same issue and it was down to the client's router. This was resolved by upgrading firmware on the router. (BT Voyager 220V).

New Member

Re: VPN Client connects but can't VNC or ping any inside network

usually there are two things to check for in these situations:

1. nat traversal: check that you have the command "isakmp nat-traversal" is configured

2. nat 0: make sure that you have the vpn pool configured in the nat 0 access list.

check the following:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/basclnt.htm#wp1062497

or the following configuration example:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805734ae.shtml

HTH

Shadi`

742
Views
0
Helpful
5
Replies