IPSec VPN router 881W Windows client

[fredeinfra]

I can connect the vpn, remote client to server, remote client can't access the services from the server like RDP.

Server can access the client services(FTP or RDP).

remote client  to server (ping is ok)

server to client (ping is ok)

Is it a route problem?

[Flavio Miranda]

Hello,

First of all, is RDP enable on server?

If ping is ok on both side, there is no routing problem.

Either RDP is disabled on Server or some Access-list is blocking from Client to Server.

[fredeinfra]

Local computers access the Server, my configuration:

ip local pool VPNPOOL 172.168.0.10 172.168.0.20

ip nat inside source list 23 interface FastEthernet4 overload

access-list 23 permit 172.168.0.0 0.0.0.255

Regards

[Flavio Miranda]

This is the NAT configuration .You are allowing host from 172.168.0.10 up to 20 to be NATed. 

Does you server is placed on the  FastEthernet4  interface ?

Which is the IP address of client and server?

and show me the "route print" command on the server.

[fredeinfra]

Local Network :

ip dhcp pool REDE local
 network 192.168.0.0 255.255.255.0
 dns-server 208.67.222.222
 default-router 192.168.0.1

interface Vlan1
 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
 ip address 192.168.0.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1452
!

WAN Connection:

interface FastEthernet4
 ip address dhcp
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
 crypto map map1
!

Server on FE0 VLAN1

 Endereço IPv4. . . . . . . .  . . . . . . . : 192.168.0.10
 Máscara de Sub-rede . . . . . . . . . . . . : 255.255.255.0
 Gateway Padrão. . . . . . . . . . . . . . . : 192.168.0.1

Remote Client 

 Endereço IPv4. . . . . . . .  . . . . . . . : 172.168.0.12
 Máscara de Sub-rede . . . . . . . . . . . . : 255.255.255.0
 Gateway Padrão. . . . . . . . . . . . . . . : 172.168.0.1

Server to Client:
C:\Users\Dell>tracert 172.168.0.12

Rastreando a rota para ACA8000C.ipt.aol.com [172.168.0.12]
com no máximo 30 saltos:

  1     2 ms     2 ms     2 ms  192.168.0.1
  2    26 ms    18 ms    20 ms  ACA8000C.ipt.aol.com [172.168.0.12]

Rastreamento concluído.

Client to Server:

C:\Users\Dell>tracert 192.168.0.10

Rastreando a rota para 192.168.0.10 com no máximo 30 saltos:

  1     20 ms     18 ms     32 ms  (my public ip of FE4)
  2    84 ms    25 ms    20 ms  (my public ip of FE4)

Rastreamento concluído.

[fredeinfra · Accepted solution]

I found the solution:

https://supportforums.cisco.com/t5/vpn/vpn-work-but-i-can-t-access-to-switch/m-p/1860337/highlight/false#M62947

Thanks Flavio Miranda.

[Flavio Miranda]

You're welcome.

-If I helped you somehow, please, rate it as useful.-