I authenticate with my VPN client, but then I can't do anything

[joneschw1]

I have setup the PIX to accept vpn connections from remote clients via pptp. I created a vpn session with Windows XP from the external, and authenticated fine (I think). I got an IP address from the vpdn pool, but.... I can't do anything once I am authenticated. I can't ping anything, I can't see any internal resources, etc. I am stuck. I am running 6.3.3 on a 515. Here is the relevant config. Anyones help would be greatly appreciated.

ip local pool pptp-vpdn 10.1.1.51-10.1.1.55

aaa-server TACACS+ protocol tacacs+

aaa-server RADIUS protocol radius

aaa-server LOCAL protocol localsysopt connection permit-ipsec

sysopt connection permit-pptp

vpdn group 1 accept dialin pptp

vpdn group 1 ppp authentication chap

vpdn group 1 ppp authentication mschap

vpdn group 1 ppp encryption mppe 40

vpdn group 1 client configuration address local pptp-vpdn

vpdn group 1 client configuration dns 10.1.1.2

vpdn group 1 pptp echo 60

vpdn group 1 client authentication local

vpdn username cjones password ********

vpdn enable outside

[mostiguy]

Your IP local pool cannot consist of ip addresses that reside on the *inside* interface, because a vpn connected client resides on the *outside* interface. Try changing your ip local pool to another subnet, and report back - this is based on the assumption that 10.1.1 is the inside subnet because of the dns server being 10.1.1.2

[joneschw1]

So I tried changing my VPN pool to 10.3.1.x, and I got authenticated, got an IP, but can't access anything. I am still stuck unfortunately.

[jmia · Accepted solution]

Chris,

Take a look at this document and let me know if it helps :

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080143a5d.shtml

Jay

[joneschw1]

Thanks for the help. This document helped me find a config error that I had. I had all the statements, but a wrong subnet