IPSec VPN configuration

[richardaitken]

Good day eveyones,

Would appreciate some help. I am trying to establish a tunnel from my LapTop using Windows XP Pro and a Cisco VPN Client Version 4.6. I am trying to configure my Cisco 837 Router to accept a connection from my LapTop. My goal is when I am on the road for several days in a row, I can get access to my network resources like Share Drives, Exchange Server Mailboxe, FTP folder, ect. I have include my ShowRun as attachment.

Right Now, when I try a connection on my LapTop, I get the User and Password window and when I fill those informations I get the error 412 and it says not connected???

What did I miss?? I used the Cisco Web Site to download the IOS IPSec NAT Transparency with VPN Client Configuration Example.PDF file and I followed the instructions...

Some help will be greatly appreciated...

Thanks in advance,

Richard

[gfullage]

You haven't allowed the router to assign an IP address to the client. This happens asfter client authentication which is why you get that far and then get disconnected. Add the following line to your router config:

crypto map clientmap client configuration address respond

Also, if you expect to see shares and the like, you'd better send down your internal WINS/DNS server to the VPN client also, do this with the following:

crypto isakmp client configuration group 3000client

  dns 10.10.10.x

  wins 10.10.10.x

[richardaitken]

Thanks gfullage,

I did the modifications and now, I can see the little lock closed in the taskbar. I beleive that I have a connection, I can see an internal ip address and my internal DNS Server ip address assigned to the Cisco VPN Client NIC, but I cannot access my share drives, nor my Exchange Inbox, not even I can't access Internet with IE anymore (when VPN connected), if I disconnect my tunnel by closing the Cisco VPN Client, I can get back my internet access!!! Note that I am doing all this with an outside highspeed internet connection on my laptop (outside my network).

When I am connected via Cisco VPN Client, I tried to ping my internal computers ip addresses, but I get no response.

What else can I change or add in my router configuration? I have include an updated show run.

My internal ip addresses range are 10.10.10.2 10.10.10.254

My router ip address is 10.10.10.1

My internal (Web, dns, ftp, exchange server) ip address is 10.10.10.102

My internal (Shared drives, files server) is 10.10.10.101

My ISP DNS Server IP address is 65.39.192.130

Thanks for your help,

Richard