10-11-2009 07:54 PM
Hello,
I'm running into a strange problem where I have installed the VPN client (5.0.05.0290) on a several PC's and when I try to access the local network using ICMP, I cannot ping the local LAN addresses. I install the same client on another PC and ICMP to my local LAN works just fine.
I've installed the client on both XP sp2 and Vista machines. The problem seems to happen more on an XP box however. It is hit and miss. I installed the client on 8 PC's running XP and on 4 of them, I cannot ping the local network.
I have reinstalled the client, disabled the adapter, flushed the dns, still cannot access the local network on 4 machines.
Thoughts?
10-12-2009 06:16 AM
Are you only trying ICMP? I would suggest checking the Windows firewall settings on the pcs that are having the issue. More often than not I see ICMP blocked by the local firewall.
Paul
10-13-2009 05:48 AM
I thought the same thing, but I tried that and still nothing. Funny thing is I can try to VPN into another ASA and connect just fine with the same PC that does not work on another ASA.
10-13-2009 06:58 AM
John-
Hmmmm. Have you tried watching real-time traffic via the ASDM on the ASA in question while attempting to connect with one of the troublesome pcs to see if anything is being dropped?
Also, any chance your dynamic crypto map is configured differently on this particular ASA as compared to the others?
Paul
10-13-2009 09:27 AM
Um.... got it!! I changed this entry
no crypto isakmp nat-traversal to
crypto isakmp nat-traversal
and the PC's now work!!! Go figure.
10-13-2009 10:09 AM
John-
Good news. It's usually the easiest thing imaginable!
Paul
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide