About trevorgeorgia

trevorgeorgia · 04-28-2012

Hi all,I am attempting to setup a client -> server VPN using IOS 12.4, and Cisco Client 5.x. At this point, the client does connect, however, I cannot ping, or send / receive data over the VPN. I am initially attempting a split-tunnel config, as the...

trevorgeorgia · 04-29-2012

It seems that when I attempt to ping from 192.168.1.x to the vpn client's ip on the 10.1.254.0 network, the number of access-list hits on the rule access-list 102 deny ip 192.168.1.0 0.0.0.255 10.1.254.0 0.0.0.255 increment. However, when I attempt ...

trevorgeorgia · 04-29-2012

Hmm. Did not seem to work. I still cannot ping the router's vpn interface / loopback (10.1.254.1) or any of the inside machines on the 192.168.1.0/24 network.

trevorgeorgia · 04-29-2012

Actually, it would seem to be easier to make access-list 102 contain:access-list 102 deny ip 192.168.1.0 0.0.0.255 10.1.254.0 0.0.0.255access-list 102 permit ip 192.168.1.0 0.0.0.255 anythen delete the existing nat overload and do:ip nat inside sourc...

trevorgeorgia · 04-29-2012

I apologize I'm thick here. So, I need to remove the line I added on the access-list. So access-list 101 would just be:access-list 101 permit 192.168.1.0 0.0.0.255 anyWhich should pass the split-tunneling route to the client.I then need to add a li...

trevorgeorgia · 04-29-2012

Hi Andrew,Thanks for the reply. The only nat statement I have is the overload for the internal hosts on the 192.168.1.0/24 network to access the Internet. Can you clarify?I have updated access-list 101 to state:access-list 101 deny 192.168.1.0 0.0....

Member Since	‎04-28-2012 10:24 PM
Date Last Visited	‎08-18-2017 03:54 AM
Posts	6

User Statistics

User Activity

I could really use a second set of eyes on this VPN config. :)

Re: I could really use a second set of eyes on this VPN config.

Re: I could really use a second set of eyes on this VPN config.

Re: I could really use a second set of eyes on this VPN config.

Re: I could really use a second set of eyes on this VPN config.

Re: I could really use a second set of eyes on this VPN config.