Unable to connect network from Cisco Client VPN

by karan on May 19, 2010

I have 1841 and configured below client vpn

crypto isakmp client configuration group xxxxx
key xxxxxxxxxxx
dns 10.28.x.xx 10.12.x.xx
wins 10.28.x.xx
domain xxxxxx
pool GBIT
acl 2001

ip local pool GBIT 192.168.xxx.xxx 192.168.xxx.xxx

access-list 2001 permit ip 10.13.0.0 0.0.255.255 any
access-list 2001 permit ip 10.12.1.0 0.0.0.255 any
access-list 2001 permit ip 10.246.0.0 0.0.255.255 any
access-list 2001 permit ip 10.28.0.0 0.0.255.255 any

The problem here is, I am able to connect the client VPN from ourside world but after connected I am not able to access any of the network which is defined in “acl 2001″

Experts, can someone suggest where is the problem.

{ 3 comments… read them below or add one }

arul May 19, 2010 at 4:58 am

Double check that you have configured NAT exemption for the VPN traffic.

Kumar May 19, 2010 at 4:59 am

There is no any NAT excemptions for VPN traffic.
And one morething the same configuration is working fine with another router with different public IP

arul May 19, 2010 at 4:59 am

What do you mean by there is no NAT exemption for VPN traffic? Do you have NAT statement at all on your router? If you do, you would need to configure ACL to deny the VPN traffic from being NATed. Please share config for further help.

Previous post:

Next post: