Home | Site Map | Cisco How To | Net How To | Wireless | Search | Forums | Services | Setup Guide | Chicagotech MVP | About Us | Contact Us|
|
VPN Issues
How to
setup VPN
Can see the
remote computers but get access denied Can't access the remote network at home only
Cause: The problem is the home LAN (VPN client) using the same IP and Subnet as the remote LAN you were trying to dial into.
1. Make sure the the Routing and Remote Access service on the VPN server is
running. To do this go to the Properties of My Computer>Manager>Services.
2. Make sure remote access on the VPN server is enabled. To enable the remote access server, Open Routing and Remote Access, right-click the server name for which you want to enable remote access, and then click Properties. On the General tab, select the Remote access server check box. 3. Make sure PPTP or L2TP ports, or both are enabled for inbound remote access requests. For consultants, refer to case RL040503 Can't connect to a VPN server on the outside of the PIX Symptom: When attempting to connect to a VPN server on the outside of the PIX it returns error 721 or 800, the computer failed to respond. Resolution: 1) In order to PPTP through a PIX, you must have a one-to-one mapping from the external IP to an internal IP for type 47 GRE packets and port 1723. For example, for pptp add this: conduit permit gre host x.x.x.x any AND conduit permit tcp host x.x.x.x eq 1723. For l2tp over ipsec: conduit permit esp host x.x.x.x any, conduit permit udp host x.x.x.x eq 1701 any AND conduit permit udp host x.x.x.x eq 500 any. 2) If the PIX is V6.3(3) or above, you can enable PPTP fixup, fixup protocol pptp 1723. Case Study - Firewall restricts accessing outside Can XP Home have multi VPN connections open simultaneously, like NT and W2K Pro? This is not supported in the Home edition. Client VPN IP address must be used as a default gatewaySymptom: you setup a VPN server and assign the VPN server IP as a VPN default gateway. While VPN clients connecting to the VPN server, they can't access to the network.Resolution: the gateway IP address should be the client's IP assigned by the VPN server, not the IP address of the VPN server's Internet interface. You can only determine the IP address of the VPN client's virtual interface when the client is connected by double-clicking the virtual private networking connection object when the VPN connection is active. In the resulting Status dialog box, click the Details tab. Or use ipconfig /all command.Still need help, contact consultant Your feedback and contributions to this web site Do not install VPN on W2K with ICS running Many users have reported that they were experienced some difficulties after installing VPN on w2k/xp running ICS and ICS clients may receive "Error: Page Can Not be Displayed" message. The reason is that establishing a VPN connection on the ICS Host modifies the Routing Table on the ICS Host. that will forces all clients that try to connect to the Internet to use the VPN routing table instead of the ICS routing table used to connect to the Internet service provider (ISP). You may modify the route table to fix this problem, for example, route -p add <network> mask <subnet mask> <router ip>. If you want to add a route for a single host (firewall which is on another subnet), do this route -p add <ip> mask 255.255.255.255 <host ip>, for example, route -p add 192.168.0.100 255.255.255.255 160.213.320.1. Enable Allow Local LAN Access on Cisco VPN client Q: I uses Cisco VPN client at home to access my company VPN. However, I can't access my home network while connecting the VPN. Any suggestions? A: You may enable Allow Local LAN Access. To do this, right-click the connection>transport, check Allow Local LAN Access. How to enable RRAS and NAT logs 1. To select the event type for RRAS, right-click RRAS>Logging. Go to the client VPN connection properties>Options, have him select include Windows logon domain. When he connects to VPN network, he will have to enter the domain name as well as their username and password. To Manage VPN idle time, go to Remote access policies and create a policy. How to setup VPN for MS VPN clients on Cisco PIX To setup VPN for MS VPN clients on Cisco PIX, you need to add the
following lines.
This web is provided "AS IS" with no warranties.
|
