cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1476
Views
0
Helpful
1
Replies

VPN PPTP Client cannot ping internal network

jonsonlin27
Level 1
Level 1

Hi all,

i have a problem about the VPN pptp client cannot ping to internal network, the router that i use is Cisco 2911

the ip pool client are : 10.0.0.11 10.0.0.254

the ip pptp server : 10.0.0.1

the client can connect to the vpn pptp and browsing to internet, but cannot ping to the internal network.

below are my config :

aaa new-model

aaa authentication ppp default local
aaa authorization network default local

aaa attribute list GroupClient
attribute type addr-pool "PPTP_USER_POOL" service ppp protocol ip

vpdn-group GH
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 2

username client privilege 0 password 0 xxxxxxxx
username client aaa attribute list GroupClient

interface Loopback1
ip address 10.0.0.1 255.255.255.0

interface FastEthernet0/0/1
 description ***Fibernet internet connection**
 ip address 45.112.xx.xx 255.255.255.248
 ip access-group FIREWALL_RULES in
 ip nat outside
 ip inspect FW_INSPECT out
 ip virtual-reassembly in
 ip tcp adjust-mss 1452 
 duplex auto
 speed auto 
 no cdp enable

interface Virtual-Template2
 ip unnumbered Loopback1
 ip nat inside
 ip virtual-reassembly in 
 no peer default ip address
 no keepalive
 ppp encrypt mppe 128
 ppp authentication ms-chap ms-chap-v2
 ppp ipcp dns 192.168.1.5 192.168.1.6

ip local pool PPTP_USER_POOL 10.0.0.11 10.0.0.254

if i traceroute from client :

1   307 ms    367ms    447ms    10.0.0.1

2.  *              *              *              RTO

any wrong with my configuration??

Please help!!

1 Reply 1

jonsonlin27
Level 1
Level 1

Hi all, i already resolve it,

i add a route map

for any want to access the ip pool 10.0.0.11 10.0.0.254

route map to the virtual-template 2,

and it works.

Review Cisco Networking for a $25 gift card