Cisco VPN Client connects but user can't t access anything

most_diaa · ‎07-24-2012

Hello,

I have problem on cisco vpn client connects normaly but user can't t access anything

the problem appear only on this laptop but when the same acccess the vpn via any other laptop it is working without any problems

i checked every thing win 7 firwall vpn servise, tried to uninstall then reinsatll the vpn client but no chance finally i reintalled the WIN 7

and i checked All VPN parameter it is right becuase when the vpn users try to connect to the vpn via any other laptop it is working with no problems

I need your advice how to fix thanks for your support.

nkarthikeyan · ‎07-24-2012

Hi Mostafa,

Please check with your local firewall settings. Try shutting the 3rd party firewall or windows firewall and work.

Also check on the

statistics --> Status-->Route Options & Options --> Stateful (On/not)

Am not sure this will help much.. you can try out.

Please do rate if the given information helps.

By

Karthik

most_diaa · ‎07-24-2012

Hello Karthikeyan,

thanks for your support for info but still not solved

lmcruzmir · ‎04-14-2013

same problem here, exatly the same, windows 7 doesn't work, other pc is ok.

any update? release used for cisco vpn client is 5.0.07.0440

firewall and third party software totally disabled

packets being routed fine as far as I can see with wireshark, pc puts (looks like) the packets on the wifi, but they are not received at the other end.

jallamass · ‎07-24-2012

Hi Mostafa,

Post 'route print' and 'netsh int ip show config' of windows 7 when you are disconnected and connected. It can help.

Greetz

Dustin Harrig · ‎04-04-2013

I am having this same issue. I am running Windows 8. Until recently it worked fine but now when I try to connect it sets up the connection just fine but I can't access anything. If i do this on a VM under VMworkstation on the same laptop, I can connect fine. I am currently connecting to the network throught the Broadcom 802.11n Network adapter.

ROUTE PRINT details while connected to VPN:

===========================================================================

Interface List

113...00 05 9a 3c 78 00 ......Cisco Systems VPN Adapter for 64-bit Windows

28...68 94 23 13 3a 5a ......Microsoft Hosted Network Virtual Adapter

14...6a 94 23 13 3a 5a ......Microsoft Wi-Fi Direct Virtual Adapter

13...68 94 23 13 3a 5a ......Broadcom 802.11n Network Adapter

12...d4 be d9 6a 7f bd ......Intel(R) 82579LM Gigabit Network Connection

16...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1

17...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8

1...........................Software Loopback Interface 1

18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3

31...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #6

58...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #22

65...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #30

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination Netmask Gateway Interface Metric

0.0.0.0 0.0.0.0 172.16.255.254 172.16.128.0 25

10.0.0.0 255.0.0.0 172.31.255.1 172.31.255.2 100

127.0.0.0 255.0.0.0 On-link 127.0.0.1 306

127.0.0.1 255.255.255.255 On-link 127.0.0.1 306

127.255.255.255 255.255.255.255 On-link 127.0.0.1 306

165.138.127.243 255.255.255.255 172.16.255.254 172.16.128.0 100

172.16.0.0 255.255.0.0 On-link 172.16.128.0 281

172.16.0.10 255.255.255.255 On-link 172.16.128.0 100

172.16.128.0 255.255.255.255 On-link 172.16.128.0 281

172.16.255.255 255.255.255.255 On-link 172.16.128.0 281

172.31.255.0 255.255.255.0 On-link 172.31.255.2 281

172.31.255.2 255.255.255.255 On-link 172.31.255.2 281

172.31.255.255 255.255.255.255 On-link 172.31.255.2 281

192.168.125.0 255.255.255.0 On-link 192.168.125.1 276

192.168.125.1 255.255.255.255 On-link 192.168.125.1 276

192.168.125.255 255.255.255.255 On-link 192.168.125.1 276

192.168.191.0 255.255.255.0 On-link 192.168.191.1 276

192.168.191.1 255.255.255.255 On-link 192.168.191.1 276

192.168.191.255 255.255.255.255 On-link 192.168.191.1 276

224.0.0.0 240.0.0.0 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 192.168.125.1 276

224.0.0.0 240.0.0.0 On-link 192.168.191.1 276

224.0.0.0 240.0.0.0 On-link 172.16.128.0 281

224.0.0.0 240.0.0.0 On-link 172.31.255.2 281

255.255.255.255 255.255.255.255 On-link 127.0.0.1 306

255.255.255.255 255.255.255.255 On-link 192.168.125.1 276

255.255.255.255 255.255.255.255 On-link 192.168.191.1 276

255.255.255.255 255.255.255.255 On-link 172.16.128.0 281

255.255.255.255 255.255.255.255 On-link 172.31.255.2 281

===========================================================================

Persistent Routes:

None

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination Gateway

1 306 ::1/128 On-link

16 276 fe80::/64 On-link

17 276 fe80::/64 On-link

13 281 fe80::/64 On-link

113 281 fe80::/64 On-link

17 276 fe80::2c31:1213:b183:938e/128

On-link

113 281 fe80::949d:9ec9:4f9e:19cf/128

On-link

16 276 fe80::a441:9a6:2407:268c/128

On-link

13 281 fe80::bd16:aa62:1c71:4d46/128

On-link

1 306 ff00::/8 On-link

16 276 ff00::/8 On-link

17 276 ff00::/8 On-link

13 281 ff00::/8 On-link

113 281 ff00::/8 On-link

===========================================================================

Persistent Routes:

None

NETSH INT IP SHOW CONFIG while connected:

Configuration for interface "Local Area Connection"

DHCP enabled: No

IP Address: 172.31.255.2

Subnet Prefix: 172.31.255.0/24 (mask 255.255.255.0)

InterfaceMetric: 25

Statically Configured DNS Servers: 10.41.3.227

10.41.3.228

Register with which suffix: Primary only

Statically Configured WINS Servers: None

Configuration for interface "Local Area Connection* 20"

DHCP enabled: Yes

InterfaceMetric: 25

DNS servers configured through DHCP: None

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "Local Area Connection* 11"

DHCP enabled: Yes

InterfaceMetric: 25

DNS servers configured through DHCP: None

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "Wi-Fi"

DHCP enabled: Yes

IP Address: 172.16.128.0

Subnet Prefix: 172.16.0.0/16 (mask 255.255.0.0)

Default Gateway: 172.16.255.254

Gateway Metric: 0

InterfaceMetric: 25

DNS servers configured through DHCP: 172.16.0.10

172.16.0.11

8.8.8.8

8.8.4.4

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "Ethernet"

DHCP enabled: Yes

InterfaceMetric: 10

DNS servers configured through DHCP: None

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "VMware Network Adapter VMnet1"

DHCP enabled: No

IP Address: 192.168.125.1

Subnet Prefix: 192.168.125.0/24 (mask 255.255.255.0)

InterfaceMetric: 20

Statically Configured DNS Servers: None

Register with which suffix: Primary only

Statically Configured WINS Servers: None

Configuration for interface "VMware Network Adapter VMnet8"

DHCP enabled: No

IP Address: 192.168.191.1

Subnet Prefix: 192.168.191.0/24 (mask 255.255.255.0)

InterfaceMetric: 20

Statically Configured DNS Servers: None

Register with which suffix: Primary only

Statically Configured WINS Servers: None

Configuration for interface "Loopback Pseudo-Interface 1"

DHCP enabled: No

IP Address: 127.0.0.1

Subnet Prefix: 127.0.0.0/8 (mask 255.0.0.0)

InterfaceMetric: 50

Statically Configured DNS Servers: None

Register with which suffix: None

Statically Configured WINS Servers: None

ROUTE PRINT while disconnected:

===========================================================================

Interface List

28...68 94 23 13 3a 5a ......Microsoft Hosted Network Virtual Adapter

14...6a 94 23 13 3a 5a ......Microsoft Wi-Fi Direct Virtual Adapter

13...68 94 23 13 3a 5a ......Broadcom 802.11n Network Adapter

12...d4 be d9 6a 7f bd ......Intel(R) 82579LM Gigabit Network Connection

16...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1

17...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8

1...........................Software Loopback Interface 1

18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3

31...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #6

58...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #22

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination Netmask Gateway Interface Metric

0.0.0.0 0.0.0.0 172.16.255.254 172.16.128.0 25

127.0.0.0 255.0.0.0 On-link 127.0.0.1 306

127.0.0.1 255.255.255.255 On-link 127.0.0.1 306

127.255.255.255 255.255.255.255 On-link 127.0.0.1 306

172.16.0.0 255.255.0.0 On-link 172.16.128.0 281

172.16.128.0 255.255.255.255 On-link 172.16.128.0 281

172.16.255.255 255.255.255.255 On-link 172.16.128.0 281

192.168.125.0 255.255.255.0 On-link 192.168.125.1 276

192.168.125.1 255.255.255.255 On-link 192.168.125.1 276

192.168.125.255 255.255.255.255 On-link 192.168.125.1 276

192.168.191.0 255.255.255.0 On-link 192.168.191.1 276

192.168.191.1 255.255.255.255 On-link 192.168.191.1 276

192.168.191.255 255.255.255.255 On-link 192.168.191.1 276

224.0.0.0 240.0.0.0 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 192.168.125.1 276

224.0.0.0 240.0.0.0 On-link 192.168.191.1 276

224.0.0.0 240.0.0.0 On-link 172.16.128.0 281

255.255.255.255 255.255.255.255 On-link 127.0.0.1 306

255.255.255.255 255.255.255.255 On-link 192.168.125.1 276

255.255.255.255 255.255.255.255 On-link 192.168.191.1 276

255.255.255.255 255.255.255.255 On-link 172.16.128.0 281

===========================================================================

Persistent Routes:

None

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination Gateway

1 306 ::1/128 On-link

16 276 fe80::/64 On-link

17 276 fe80::/64 On-link

13 281 fe80::/64 On-link

17 276 fe80::2c31:1213:b183:938e/128

On-link

16 276 fe80::a441:9a6:2407:268c/128

On-link

13 281 fe80::bd16:aa62:1c71:4d46/128

On-link

1 306 ff00::/8 On-link

16 276 ff00::/8 On-link

17 276 ff00::/8 On-link

13 281 ff00::/8 On-link

===========================================================================

Persistent Routes:

None

NETSH INT IP SHOW CONFIG while disconnected:

Configuration for interface "Local Area Connection* 20"

DHCP enabled: Yes

InterfaceMetric: 25

DNS servers configured through DHCP: None

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "Local Area Connection* 11"

DHCP enabled: Yes

InterfaceMetric: 25

DNS servers configured through DHCP: None

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "Wi-Fi"

DHCP enabled: Yes

IP Address: 172.16.128.0

Subnet Prefix: 172.16.0.0/16 (mask 255.255.0.0)

Default Gateway: 172.16.255.254

Gateway Metric: 0

InterfaceMetric: 25

DNS servers configured through DHCP: 172.16.0.10

172.16.0.11

8.8.8.8

8.8.4.4

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "Ethernet"

DHCP enabled: Yes

InterfaceMetric: 10

DNS servers configured through DHCP: None

Register with which suffix: Primary only

WINS servers configured through DHCP: None

Configuration for interface "VMware Network Adapter VMnet1"

DHCP enabled: No

IP Address: 192.168.125.1

Subnet Prefix: 192.168.125.0/24 (mask 255.255.255.0)

InterfaceMetric: 20

Statically Configured DNS Servers: None

Register with which suffix: Primary only

Statically Configured WINS Servers: None

Configuration for interface "VMware Network Adapter VMnet8"

DHCP enabled: No

IP Address: 192.168.191.1

Subnet Prefix: 192.168.191.0/24 (mask 255.255.255.0)

InterfaceMetric: 20

Statically Configured DNS Servers: None

Register with which suffix: Primary only

Statically Configured WINS Servers: None

Configuration for interface "Loopback Pseudo-Interface 1"

DHCP enabled: No

IP Address: 127.0.0.1

Subnet Prefix: 127.0.0.0/8 (mask 255.0.0.0)

InterfaceMetric: 50

Statically Configured DNS Servers: None

Register with which suffix: None

Statically Configured WINS Servers: None

most_diaa · ‎04-15-2013

I fixed it finally by installing deterministic network DNE on the clinet side it will solve the prooblem

lmcruzmir · ‎04-15-2013

thanks for your fast answer. I found the same reply in another thread this morning, but thanks anyway.

Dustin Harrig · ‎04-15-2013

I have this checked on both my wireless and wired connections properties but it still doesn't enter the VPN tunnel. The ASA shows me connected but no encrypted traffic passes.