cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2861
Views
0
Helpful
28
Replies
Beginner

Re: easyvpn server has created but Can't access local LAN using

Do I need OUT to IN procedures to make vpn traffics work?

Cisco Employee

Re: easyvpn server has created but Can't access local LAN using

Doesn't seem to be NAT issue, nor you need out to in procedures.

Are you able to ping 192.168.1.82, or RDP to that server or do nslookup against that server?

Contributor

Re: easyvpn server has created but Can't access local LAN using

Is 192.168.1.0 used on the client LAN by any chance?

If your client pool is a part of 192.168.1.0 LAN subnet you must remove

no ip proxy-arp

from Fa0/0.71 or add static route for pool addresses pointing towards outside.

Beginner

Re: easyvpn server has created but Can't access local LAN using

Beginner

Re: easyvpn server has created but Can't access local LAN using

Hi

I got the image above when trying to test a vpn client

Jeniffer,

failed ping to .1.82

Peter,

192.168.1.0 , this is the local LAN

the vpn clients pool is :192.168.50.0

vpn client cannot ping any of 192.168.1.0 ip

how to remove " no ip proxy-arp" ?

Beginner

Re: easyvpn server has created but Can't access local LAN using

Hi,


I tried to connect from a different pc using cisco vpn client and it succeed

, the pc uses another ISP,

but I can't from my laptop.

I noticed that when I connected from the pc the ip in the local Lan route tape in cisco vpn client was 192.1.0.0, and their sent and receive packets

but from my laptop the local Lan route tape was strange ip (public) and there are sent packets but no receive


something wrong, no restriction on laptop,

Contributor

Re: easyvpn server has created but Can't access local LAN using

Please show us

show crypto isakmp sa det

show ip route

for both PCs as well as the Statistics screenshots from both.

Beginner

Re: easyvpn server has created but Can't access local LAN using

Beginner

Re: easyvpn server has created but Can't access local LAN using

                  

Beginner

Re: easyvpn server has created but Can't access local LAN using

XTR# show crypto isakmp sa det

Codes: C - IKE configuration mode, D - Dead Peer Detection

       K - Keepalives, N - NAT-traversal

       X - IKE Extended Authentication

       psk - Preshared key, rsig - RSA signature

       renc - RSA encryption

C-id  Local           Remote          I-VRF    Status Encr Hash Auth DH Lifetime Cap.

2    197.251.333.147    143.278.134.74           ACTIVE 3des sha       2  06:41:25 CX

       Connection-id:Engine-id =  2:1(software)

XTR # show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is 197.251.333.146 to network 0.0.0.0

     197.251.333.0/30 is subnetted, 1 subnets

C       197.251.333.147 is directly connected, FastEthernet0/0.75

C    192.168.1.0/24 is directly connected, FastEthernet0/0.71

S*   0.0.0.0/0 [1/0] via197.251.333.146

Beginner

Re: easyvpn server has created but Can't access local LAN using

the above are from the laptop, the issue that when my friend use my ISP connection, then he get the same problem.

is it routing issue?

Contributor

Re: easyvpn server has created but Can't access local LAN using

Do the PCs on your ISP (bad) and other ISP (good) have both private or public addresses? Or is that the difference ?

You can try to apply a Virtual template like in

http://ltlnetworker.wordpress.com/2010/05/10/ios-easy-vpn-with-radius-and-aaa-cache-2/

Beginner

Re: easyvpn server has created but Can't access local LAN using

the 2 PCs have the same standard config., no special thing about any of them. when my friend's pc uses my internet connection then the problem occur, but no special thing about ISP. do you thing the IOS of the router corrupt or has a bug somewhere inside

do I need to do something with routing?

Highlighted
Beginner

easyvpn server has created but Can't access local LAN using cisc

You may need to enable NAT Traversal. Type this.

CRYPTO ISAKMP NAT-TRAVERSAL 30

More in depth info here:

http://supertekboy.com/2014/01/28/cisco-vpn-connects-but-cannot-access-inside-resources/