Cisco Router 4300 series Setting Remote Access VPN over IPSec cannot working

[zarr12steven]

Spec:

Cisco IOS XE Software, Version 03.16.04b.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S4b, RELEASE SOFTWARE (fc1)
cisco ISR4331/K9

Problem:

I follow this document to setup Remote Access VPN on cisco router 4300 series, when I connected VPN, but I can't ping NAT internal IP Address and internet. So I have no idea that how to fixed it?

Can anyone help me? or tell me what's going on? 

[Mohammed al Baqari]

Hi,

Your ip local pool range is part of ACL 2 which is natting all traffic. You need to change this to extended ACL and exclude traffic between ip pool and lan.