cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2270
Views
0
Helpful
4
Replies

VPN client can't access or ping the local network

Hi All,

I have the following setup main site has many VPN connections (site-to-site)

i have added VPN client setup to main,   clients  can login but can’t reach or ping any host even default gateway

Attached   configuration file.

Thanks

Abdallah Alkhader

1 Accepted Solution

Accepted Solutions

please paste a screenshot of the VPN-client statistics after pinging and also the output of "show crypto ipsec sa".

Which address do you try to reach on the router?

And under Fa4, you probably don't want do disaple cef, so remove these:

no ip route-cache cef

no ip route-cache

--

Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

4 Replies 4

Any suggestion ?

1) The dynamic crypto map should always be the last entry in the crypto map:

no crypto map MYMAP 30

crypto map MYMAP 65000 ipsec-isakmp dynamic dynmap

2) I try to remember if on the legacy dynamic crypto maps RRI needed to be configured ...

crypto dynamic-map dynmap 10

  reverse-route

EDIT: overlooked some config ...

-- 

Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Thanks Karsten for yr reply

i added thoes lines but still i am not able to ping anything

regards

please paste a screenshot of the VPN-client statistics after pinging and also the output of "show crypto ipsec sa".

Which address do you try to reach on the router?

And under Fa4, you probably don't want do disaple cef, so remove these:

no ip route-cache cef

no ip route-cache

--

Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: