Tunnel establishes but no data goes through - 3015 to S/W client

[john.pierson]

O.k, it's the first time I've tried to configure this & I'm sure I've missed something glaringly obvious....

I've configured a 3015 to authenticate to a CiscoSecure ACS 2.6 box. The other side of the tunnel is a w2k PC running the VPN client (3.5.1). The user is authenticated & the tunnel set up o.k. If I then try to ping/telnet anything I get no response. I have used no filters except for the default private/public ones on the interfaces. I have not set up split tunneling.

After reading the forum I cannot see any ARP issues & the PC does not have any interfaces on the same subnet as the 3015 is dishing out.

Help! Any ideas where I shoud be looking?

Thanks, John.

[jliscano]

Hi John,

I think this might be a routing issue somewhere on your network. If you see the user logged in under the 3015 Concentrator in Administration | Administer Session | Remote Access Session, does it have a private IP assigned? Are you assigning a pool of addresses that is different from the private interface of your 3015? Example: if you pool of addresses is 192.168.0.0/24 and your private interface on the 3015 is on 10.0.0.0/8. make sure you have your IP routes setup on the 3015 and your router (ex. 10.0.0.0 network).

Also, make sure you have a Tunneled Default Gateway configured. It should be your internal gateway for you network (ex. 10.0.0.0 network).

I would check these two things first.

Jerome