cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
526
Views
0
Helpful
2
Replies

VPN Clients can browse my pc, I cant browse theirs

JBDanford2002
Level 1
Level 1

VPN clients can browse my pc but I cannot browse theirs. I am trying by IP \\xxx.xxx.xxx.xxx\c$ Here is my config: Help is appreciated.

nameif ethernet0 outside security0

nameif ethernet1 inside security100

nameif ethernet2 sunnet security90

nameif ethernet3 pubnet security5

enable password

passwd

hostname

interface ethernet0 auto

interface ethernet1 auto

interface ethernet2 auto

interface ethernet3 auto

ip address outside 11.x.x.x.255.255.0

ip address inside 192.168.170.4 255.255.255.0

ip address sunnet 192.168.1.1 255.255.255.0

ip address pubnet 192.168.2.5 255.255.255.0

Static (inside,Outside) 11.x.x.x.x.170.147 netmask 255.255.255.255

route outside 0.0.0.0 0.x.x.x.x.11.1 1

access-list nonat permit ip 192.168.170.0 255.255.255.0 192.168.175.0 255.255.255.0

access-list nonat permit ip 192.168.1.0 255.255.255.0 192.168.175.0 255.255.255.0

access-list nonat permit ip 192.168.2.0 255.255.255.0 192.168.175.0 255.255.255.0

access-list nonat permit ip 192.168.170.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list nonat permit ip 192.168.175.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list nonat permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list nonat permit ip 192.168.2.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list nonat permit ip 192.168.170.0 255.255.255.0 192.168.15.0 255.255.255.0

access-list nonat permit ip 192.168.175.0 255.255.255.0 192.168.15.0 255.255.255.0

access-list nonat permit ip 192.168.1.0 255.255.255.0 192.168.10.5 255.255.255.0

access-list nonat permit ip 192.168.2.0 255.255.255.0 192.168.10.5 255.255.255.0

nat (inside) 0 access-list nonat

access-list 101 permit ip 192.168.170.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list 101 permit ip 192.168.175.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list 101 permit ip 192.168.2.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list 101 permit ip 192.168.170.0 255.255.255.0 192.168.15.0 255.255.255.0

access-list 101 permit ip 192.168.175.0 255.255.255.0 192.168.15.0 255.255.255.0

access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.15.0 255.255.255.0

access-list 101 permit ip 192.168.2.0 255.255.255.0 192.168.15.0 255.255.255.0

access-list 105 permit ip any any

access-list 105 permit icmp any any

access-list 106 permit icmp any 11.x.x.147

access-group 105 in interface inside

access-group 106 in interface inside

nat (inside) 0 access-list nonat

telnet 192.168.170.0 255.255.255.0 inside

ip local pool pptp-pool 192.168.175.1-192.168.175.50

aaa-server RADIUS protocol radius

aaa-server RADIUS (inside) host 192.168.170.18 test timeout 5

vpdn group 1 accept dialin pptp

vpdn group 1 ppp authentication pap

vpdn group 1 ppp authentication chap

vpdn group 1 ppp authentication mschap

vpdn group 1 ppp encryption mppe auto

vpdn group 1 client configuration address local pptp-pool

vpdn group 1 client configuration dns 192.168.170.25 192.168.170.18

vpdn group 1 client configuration wins 192.168.170.25

vpdn group 1 client authentication aaa RADIUS

vpdn group 1 pptp echo 60

vpdn enable outside

vpdn enable inside

sysopt connection permit-pptp

sysopt connection permit-ipsec

crypto ipsec transform-set Heretothere esp-des esp-md5-hmac

crypto map Heretotheremap 1 ipsec-isakmp

crypto map Heretotheremap 1 match address 101

crypto map Heretotheremap 1 set peer 10.10.10.2

crypto map Heretotheremap 1 set transform-set Heretothere

crypto map Heretotheremap interface outside

isakmp enable outside

isakmp key xxxx address 10.x.x.2 netmask 255.255.255.255

isakmp identity address

isakmp policy 1 authentication pre-share

isakmp policy 1 encryption des

isakmp policy 1 hash md5

isakmp policy 1 group 1

isakmp policy 1 lifetime 1000

2 Replies 2

sachinraja
Level 9
Level 9

are you able to ping the VPN IP from your PC ? have u enabled any sort of personal firewalls, which might block access to these clients ? try from a different PC on that network and let us know.

All the best..

Raj

wong.jason
Level 1
Level 1

The reason is probably due to the CIC firewall installed together with the Cisco VPN Client, so you will have to ask them to disable it.