VPN client can't access or ping the local network

[Abdallah Alkhader]

Hi All,

I have the following setup main site has many VPN connections (site-to-site)

i have added VPN client setup to main,   clients  can login but can’t reach or ping any host even default gateway

Attached   configuration file.

Thanks

Abdallah Alkhader

[Abdallah Alkhader]

Any suggestion ?

[Karsten Iwen]

1) The dynamic crypto map should always be the last entry in the crypto map:

no crypto map MYMAP 30

crypto map MYMAP 65000 ipsec-isakmp dynamic dynmap

2) I try to remember if on the legacy dynamic crypto maps RRI needed to be configured ...

crypto dynamic-map dynmap 10

  reverse-route

EDIT: overlooked some config ...

-- 

Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Abdallah Alkhader]

Thanks Karsten for yr reply

i added thoes lines but still i am not able to ping anything

regards

[Karsten Iwen · Accepted solution]

please paste a screenshot of the VPN-client statistics after pinging and also the output of "show crypto ipsec sa".

Which address do you try to reach on the router?

And under Fa4, you probably don't want do disaple cef, so remove these:

no ip route-cache cef

no ip route-cache

--

Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni