RAS VPN Issue

[query1000]

Hi,

We have  remote access VPN configured in our Data Centre on Cisco ASA 5520 ver 7.0. for users to be able to connect data centre network.

I have observed a  strange thing -

If users connect from thier home using WiFi Broadband Internet connection, VPN connects but internal servers are not pingable.

If users connect from their home using Wired Internet connection, everything works fine. Users are connected and able to access the internal servers.

Any ideas, what could be the reason for this?

Appreiate any clues ..reg this.

thank you,

query1000

[Federico Coto Fajardo]

Hi,

Could be that ESP is being blocked by the Wireless Provider.

One test could be enabling IPsec/TCP on both server and client.

Hope it helps.

Federico.

[query1000]

Federico,

No luck.

[Federico Coto Fajardo]

When connected with the VPN client check two things:

1. If the VPN client itself is encrypting the packets (under the client statistics).

2. If the ASA is decrypting the packets.

If the client is encrypting but the ASA is not decrypting there's a big chance the traffic is being blocked by the ISP.

Do the test with regular NAT-T and also with IPsec/TCP and let us know.

Federico.