VPN Tunnel Established but no LAN Access

[davegcarter]

I have a perplexing problem where most remote site PCs are accessing the HQ LAN resources fine using the VPN Client (v4.6) connecting to a Cisco PIX 515E. All PCs are running Windows XP SP2 with the O/S firewall turned off. One site PC however establishes the IPSEC tunnel but cannot communicate with any LAN resources (Intranet, Email, etc.) and it also times out on pinging machines which should reply. I have noticed when running the VPN stats on the client that although packets are being encrypted, they are not being decrypted and there are many discarded packets. I'm pretty much a beginner when it comes to Cisco VPN so has anyone got any clues as to why one machine won't work when it's exactly the same config as others that do.

[m.sir]

It looks like NAT traversal issue

Try ond firewall following command:

PIX(config)# isakmp nat-traversal 20

M.

Hope that helps , rate if it does

[davegcarter]

Not only a quick response but that has done the trick.

Thanks very much!

[m.sir · Accepted solution]

No problem

If possible mark this issue as solved on this forum - its helpful when you search older posts

M.