11-29-2004 01:55 PM - edited 02-21-2020 01:28 PM
VPN clients can browse my pc but I cannot browse theirs. I am trying by IP \\xxx.xxx.xxx.xxx\c$ Here is my config: Help is appreciated.
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 sunnet security90
nameif ethernet3 pubnet security5
enable password
passwd
hostname
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
interface ethernet3 auto
ip address outside 11.x.x.x.255.255.0
ip address inside 192.168.170.4 255.255.255.0
ip address sunnet 192.168.1.1 255.255.255.0
ip address pubnet 192.168.2.5 255.255.255.0
Static (inside,Outside) 11.x.x.x.x.170.147 netmask 255.255.255.255
route outside 0.0.0.0 0.x.x.x.x.11.1 1
access-list nonat permit ip 192.168.170.0 255.255.255.0 192.168.175.0 255.255.255.0
access-list nonat permit ip 192.168.1.0 255.255.255.0 192.168.175.0 255.255.255.0
access-list nonat permit ip 192.168.2.0 255.255.255.0 192.168.175.0 255.255.255.0
access-list nonat permit ip 192.168.170.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list nonat permit ip 192.168.175.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list nonat permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list nonat permit ip 192.168.2.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list nonat permit ip 192.168.170.0 255.255.255.0 192.168.15.0 255.255.255.0
access-list nonat permit ip 192.168.175.0 255.255.255.0 192.168.15.0 255.255.255.0
access-list nonat permit ip 192.168.1.0 255.255.255.0 192.168.10.5 255.255.255.0
access-list nonat permit ip 192.168.2.0 255.255.255.0 192.168.10.5 255.255.255.0
nat (inside) 0 access-list nonat
access-list 101 permit ip 192.168.170.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list 101 permit ip 192.168.175.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list 101 permit ip 192.168.2.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list 101 permit ip 192.168.170.0 255.255.255.0 192.168.15.0 255.255.255.0
access-list 101 permit ip 192.168.175.0 255.255.255.0 192.168.15.0 255.255.255.0
access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.15.0 255.255.255.0
access-list 101 permit ip 192.168.2.0 255.255.255.0 192.168.15.0 255.255.255.0
access-list 105 permit ip any any
access-list 105 permit icmp any any
access-list 106 permit icmp any 11.x.x.147
access-group 105 in interface inside
access-group 106 in interface inside
nat (inside) 0 access-list nonat
telnet 192.168.170.0 255.255.255.0 inside
ip local pool pptp-pool 192.168.175.1-192.168.175.50
aaa-server RADIUS protocol radius
aaa-server RADIUS (inside) host 192.168.170.18 test timeout 5
vpdn group 1 accept dialin pptp
vpdn group 1 ppp authentication pap
vpdn group 1 ppp authentication chap
vpdn group 1 ppp authentication mschap
vpdn group 1 ppp encryption mppe auto
vpdn group 1 client configuration address local pptp-pool
vpdn group 1 client configuration dns 192.168.170.25 192.168.170.18
vpdn group 1 client configuration wins 192.168.170.25
vpdn group 1 client authentication aaa RADIUS
vpdn group 1 pptp echo 60
vpdn enable outside
vpdn enable inside
sysopt connection permit-pptp
sysopt connection permit-ipsec
crypto ipsec transform-set Heretothere esp-des esp-md5-hmac
crypto map Heretotheremap 1 ipsec-isakmp
crypto map Heretotheremap 1 match address 101
crypto map Heretotheremap 1 set peer 10.10.10.2
crypto map Heretotheremap 1 set transform-set Heretothere
crypto map Heretotheremap interface outside
isakmp enable outside
isakmp key xxxx address 10.x.x.2 netmask 255.255.255.255
isakmp identity address
isakmp policy 1 authentication pre-share
isakmp policy 1 encryption des
isakmp policy 1 hash md5
isakmp policy 1 group 1
isakmp policy 1 lifetime 1000
12-02-2004 02:26 AM
are you able to ping the VPN IP from your PC ? have u enabled any sort of personal firewalls, which might block access to these clients ? try from a different PC on that network and let us know.
All the best..
Raj
12-02-2004 09:09 PM
The reason is probably due to the CIC firewall installed together with the Cisco VPN Client, so you will have to ask them to disable it.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide