topic Re: VPN Problem in Network Security https://community.cisco.com/t5/network-security/vpn-problem/m-p/368837#M1059464 <HTML><HEAD></HEAD><BODY><P>Do you have a route back to the client address that is assigned out of the IP pool range?</P><P></P><P>You should be able to ping a host at the central site from the client, if this fails I'd suspect a missing route. The other common problem I come across is when using NAT on the VPN device, the IP pool range has to be exluded from the NAT process</P></BODY></HTML> Thu, 03 Feb 2005 20:32:20 GMT aacole 2005-02-03T20:32:20Z VPN Problem https://community.cisco.com/t5/network-security/vpn-problem/m-p/368836#M1059461 <P>I am experiencing difficulty in allowing my VPN clients to browse network resources by IP and by NETBIOS names.</P><P></P><P>My clients connect and authenticate fine. Any suggestions on what might be causing the problem?</P><P></P><P>I do have VPDN entries that point to the proper DNS and WINS servers. Is there something in routing that has to be done too?</P><P></P><P><A href="mailto:lmckee@salemcc.edu" target="_blank">lmckee@salemcc.edu</A></P> Fri, 21 Feb 2020 07:54:48 GMT https://community.cisco.com/t5/network-security/vpn-problem/m-p/368836#M1059461 lmckee 2020-02-21T07:54:48Z Re: VPN Problem https://community.cisco.com/t5/network-security/vpn-problem/m-p/368837#M1059464 <HTML><HEAD></HEAD><BODY><P>Do you have a route back to the client address that is assigned out of the IP pool range?</P><P></P><P>You should be able to ping a host at the central site from the client, if this fails I'd suspect a missing route. The other common problem I come across is when using NAT on the VPN device, the IP pool range has to be exluded from the NAT process</P></BODY></HTML> Thu, 03 Feb 2005 20:32:20 GMT https://community.cisco.com/t5/network-security/vpn-problem/m-p/368837#M1059464 aacole 2005-02-03T20:32:20Z Re: VPN Problem https://community.cisco.com/t5/network-security/vpn-problem/m-p/368838#M1059467 <HTML><HEAD></HEAD><BODY><P>Just to add on what Andy has said (Hi Andy), if you can't ping the central clients after placing the apporiate routes, check on you central pix that you have NAT-Traversal applied for ISAKMP.</P><P></P><P>&gt; isakmp nat-traversal</P><P></P><P>Hope this helps.</P><P></P><P>Jay</P></BODY></HTML> Fri, 04 Feb 2005 09:29:31 GMT https://community.cisco.com/t5/network-security/vpn-problem/m-p/368838#M1059467 jmia 2005-02-04T09:29:31Z Re: VPN Problem https://community.cisco.com/t5/network-security/vpn-problem/m-p/368839#M1059470 <HTML><HEAD></HEAD><BODY><P>Ok, I have the ability to browse by IP address now but not by NETBIOS names...</P></BODY></HTML> Fri, 04 Feb 2005 13:50:44 GMT https://community.cisco.com/t5/network-security/vpn-problem/m-p/368839#M1059470 lmckee 2005-02-04T13:50:44Z