topic Help Please! Can't see network through VPN in Network Security

Help Please! Can't see network through VPN

tc2user — Fri, 21 Feb 2020 08:12:00 GMT

I have an XP Pro notebook with Cisco VPN 4.6 loaded on it. The VPN appears to connect fine, but once it's connected, I cannot ping anything on the network, or access any resources. Also can't access the Internet. Without the VPN turned on, network access is fine.

I'm stumped! Any ideas??

Thanks,

Walt

Re: Help Please! Can't see network through VPN

mostiguy — Mon, 13 Jun 2005 16:34:19 GMT

Has any other pc connected to the vpn successfully? If yes, do they see the network? Are you running XP SP2? Is anyone else?

Re: Help Please! Can't see network through VPN

tc2user — Mon, 13 Jun 2005 16:48:01 GMT

We have several other VPN users who are not having a problem. They can see the network just fine. They are all using XP Pro; SP-2.

The problem machine is also XP Pro; SP-2. I have turned OFF the Windows Firewall and that made no difference. I have also had a network engineer verify that our VPN is working properly. At this point, I think it's a Windows issue, but still don't know what to do about it.

Thanks,

Walt

Re: Help Please! Can't see network through VPN

mostiguy — Tue, 14 Jun 2005 12:08:36 GMT

So you cannot ping anything through the tunnel, even by ip? I would enable debug logging on the pix and crank up logging on the software vpn client. The pix has a debug icmp command as well, which you can use to watch icmp traffic through the pix

Re: Help Please! Can't see network through VPN

tc2user — Tue, 14 Jun 2005 12:49:39 GMT

I had our engineer check the debug logging while I tried to connect. He could see the connection being made; everything looked good from that end. I think at this point it's a Windows problem. I'm now researching from that perspective.

Thanks for your input.

Walt

Re: Help Please! Can't see network through VPN

bbecker — Fri, 05 Aug 2005 16:22:12 GMT

Walt...have u figured this out yet? I'm in the same boat. I have one 4.7.1 3030 working fine but I'm working on a new on and I get logged in....and authenticated but thats about it. Can ping anything by ip or dns. I've compair the configs of both 3030s and they are pretty much the same.

Re: Help Please! Can't see network through VPN

dan.reynolds — Tue, 16 Aug 2005 11:07:47 GMT

I would look at the routing table on your local machine when you are connected to the VPN and see if the Virtual adapter and the Local adapter have the same metric. If they are the same you will be able to connect but not pass traffic. Here is the bug ID and info.

CSCea65393

Symptom:

Using the 4.0 VPN Client with the virtual adapter (Windows 2000 or Windows XP) in a multiple NIC

environment, the client may not pass data while connected.

Conditions:

When the client PC has multiple network interfaces and the default gateway is on the non-VPN

interface the default gateway metric will not be incremented. This may result in data that is

bound for the VPN going to the non-VPN default gateway and getting dropped. This problem is

clearly identifiable by looking at the routing table while a VPN (All Tunneling) connection is

active where the two default routes appear with equal metrics.

Workaround:

The easiest workaround is manually increment the local interface metric by '1'. Once this is done

the clients virtual adapter will have a lesser metric and be the best route.

Re: Help Please! Can't see network through VPN

jackko — Thu, 18 Aug 2005 03:33:43 GMT

please post the config

Re: Help Please! Can't see network through VPN

tc2user — Thu, 18 Aug 2005 11:09:15 GMT

Hello. This issue occurred 2 months ago, so I don't have any configs to post. I ended up reloading Windows XP to fix the problem.

Thanks,

Walt