I ask your advices!
I have Cisco 881, which is connected to the Internet.
There is a VPN-tunnel on it to a host.
command "Ping" from 881 to this host is working. But from the PC behind the cisco is not going.
I see the Internet, but not the host.
That is my config:
ip address 10.0.0.11 255.255.255.252
tunnel source FastEthernet4
tunnel mode ipsec ipv4
tunnel destination 123.345.67.89
switchport access vlan 2
no ip address
ip address 22.214.171.124 255.255.255.248
ip nat outside
ip address 192.168.0.3 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list NAT interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 126.96.36.199
ip route 192.168.100.0 255.255.255.0 10.0.0.10
ip access-list extended NAT
permit ip 188.8.131.52 0.0.0.255 any
Everything looks good here, but the symptoms sound like the remote end is missing a return route for traffic. You should have something like this on the other router:
ip route 192.168.0.0 255.255.255.0 10.0.0.11
Can you verify that this route is present?