RE: VPN Concentrator with VPN Clients

Haroon,

The concentrator usually does RRI. I wasn't really sure, but you did say that you tried assigning a local pool and statically routing that network from your router to your concentrator? If the concentrator is on a logically separate network than what your DHCP is assigning and that network is local to the router or the clients, you can see the routing issue there. If you want to use it in that manner, the concentrator would need to sit on your internal network.

-ryan

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Haroon
Sent: Wednesday, October 07, 2009 11:56 AM
To: Cisco certification
Subject: OT: VPN Concentrator with VPN Clients

Hello Experts,

Sorry about back to back OT posts but maybe I am too dumb for this crap and
someone can help me with this.... I am trying to configure CVPN 3030
Concentrator to work with either Microsoft vpn client or Cisco VPN client
5.0.03.

I have configured two groups: 1) pptp to work with MS and 2) IPSecGroup to
work with the cisco vpn client. I cannot make any connection with ms vpn
client, however, I am able to authenticate with active directory and get an
ip address from our internal dhcp server when I use cisco vpn client(ip sec
group). After the connection is established, I cannot ping or browse any
servers behind the concentrator. I even tried different subnet dhcp range
and adding static routes on the concentrator and router behind it (local
LAN) but no go.

I have tried following the cisco documents to the last letter, google search
and I tried configuring it using my own understanding of this but no luck.
Is there some setting that I am missing in the concentrator? I don't care
which client I use (MS preferred) as long as concentrator can intelligently
pass traffic through to the other side as it is with the 4 site to site
VPNs.

regards,

Haroon

Blogs and organic groups at http://www.ccie.net
Received on Wed Oct 07 2009 - 12:02:50 ART