To troubleshoot a generic problem like this, Id recommend the following troubleshooting steps:
--Check your syslogs on the ASA:
logging buffered debugging
logging buffer size 1000000
logging enable
show logg | include
--Check your nat settings. Do you have nat exemption for the VPN ip pool?
access-list nonat permit ip
nat (inside) 0 access-list nonat
If you are using 8.3, youll need to handle NAT for the VPN differently. See this link:
https://supportforums.cisco.com/docs/DOC-11639
--Check to see if you have an access-group blocking traffic:
show run | include access-group
show access-list
Are you permitting traffic sourced/destined to the VPN pool?
--Setup a continuous ping to an inside host that you should be able to reach and setup a packet capture on your inside interace:
access-list cap permit ip host host
access-list cap permit ip host host
cap cap access-list cap interface inside
--Setup a packet capture to see if the asa is dropping any packets:
cap asp type asp-drop all
show cap asp | include
--Setup a packet-tracer to see how the ASA processes this packet
packet-tracer input inside icmp 8 0 detailed
Hope this helps you identify the problem. Please remember to rate all posts that help you answer the problem and mark the question as resolved if your problem is addressed.
-heather
