1. Can you ping routers internal LAN interface ip from client after it connects?
- Yes, I can ping the Router's WAN IP and LAN IP.
2. Are the following routes correct, w.r.t reaching VPN pool from behind router?
- What is "w.r.t"? I can also ping the VPN Pool from the Router.
3. Have you check the attachment?
4. Here are the outputs as per your request.
ORIENT27F-VPN-ISR2801#show crypto eli
Hardware Encryption Layer : ACTIVE
Number of crypto engines = 1 .
CryptoEngine-0 (slot-0) details.
Capability-IPSec : IPPCP, 3DES, AES, NoRSA
IKE-Session : 0 active, 150 max, 0 failed
DH-Key : 0 active, 150 max, 0 failed
IPSec-Session : 2 active, 300 max, 0 failed
======================================================================
ORIENT27F-VPN-ISR2801#show crypto isakmp sa
dst src state conn-id slot status
x.x.x.5 112.201.162.115 QM_IDLE 1 0 ACTIVE
======================================================================
ORIENT27F-VPN-ISR2801#show crypto ipsec sa
interface: FastEthernet0/0
Crypto map tag: NOC-MAP, local addr x.x.x.5
protected vrf: (none)
local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (192.168.250.105/255.255.255.255/0/0)
current_peer 112.201.162.115 port 28527
PERMIT, flags={}
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 264, #pkts decrypt: 264, #pkts verify: 264
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: x.x.x.5, remote crypto endpt.: 112.201.162.115
path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet0/0
current outbound spi: 0x8D8DA45B(2374870107)
inbound esp sas:
spi: 0x1E903D77(512769399)
transform: esp-3des esp-sha-hmac ,
in use settings ={Tunnel UDP-Encaps, }
conn id: 3001, flow_id: FPGA:1, crypto map: NOC-MAP
sa timing: remaining key lifetime (k/sec): (4539078/3429)
IV size: 8 bytes
replay detection support: Y
Status: ACTIVE
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x8D8DA45B(2374870107)
transform: esp-3des esp-sha-hmac ,
in use settings ={Tunnel UDP-Encaps, }
conn id: 3002, flow_id: FPGA:2, crypto map: NOC-MAP
sa timing: remaining key lifetime (k/sec): (4539117/3423)
IV size: 8 bytes
replay detection support: Y
Status: ACTIVE
outbound ah sas:
outbound pcp sas:
5. PING Results
ORIENT27F-VPN-ISR2801#ping 192.168.250.105 source x.x.x.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.250.105, timeout is 2 seconds:
Packet sent with a source address of x.x.x.5
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 336/356/388 ms
ORIENT27F-VPN-ISR2801#ping 192.168.250.105 source 10.10.0.50
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.250.105, timeout is 2 seconds:
Packet sent with a source address of 10.10.0.50
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 340/360/372 ms
=================================================================
C:\>ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 172.16.10.122
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Ethernet adapter Cisco VPN:
Connection-specific DNS Suffix . : xxxxx.com
IP Address. . . . . . . . . . . . : 192.168.250.105
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.250.105
C:\>ping x.x.x.5
Pinging x.x.x.5 with 32 bytes of data:
Reply from x.x.x.5: bytes=32 time=343ms TTL=237
Reply from x.x.x.5: bytes=32 time=344ms TTL=237
Reply from x.x.x.5: bytes=32 time=346ms TTL=237
Reply from x.x.x.5: bytes=32 time=345ms TTL=237
Ping statistics for x.x.x.5:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 343ms, Maximum = 346ms, Average = 344ms
C:\>ping 10.10.0.50
Pinging 10.10.0.50 with 32 bytes of data:
Reply from 10.10.0.50: bytes=32 time=348ms TTL=255
Reply from 10.10.0.50: bytes=32 time=341ms TTL=255
Reply from 10.10.0.50: bytes=32 time=343ms TTL=255
Reply from 10.10.0.50: bytes=32 time=375ms TTL=255
Ping statistics for 10.10.0.50:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 341ms, Maximum = 375ms, Average = 351ms
