Cisco VPN Client connects and gets IP but no other access 1

[jshoker]

Hi,

I have a Cisco VPN 3005 concentrator through which users get access to the office network using the Cisco VPN client. In some cases (depending on location it seems) the users can connect ie log on successfully and get an ip address, but can't even ping anything. I don't know how to try and solve this because a) It works for other users 99% of the time. b) It appears everything should be fine. Any suggestions or clues would be appreciated.

 

[burtsbees]

How many users are able to connect and how many are not? By connect, I mean browse other resources once VPN'd in...

Burt

 

[jshoker]

Well right now there is one user who is on the road in a hotel in Japan with this particular problem. This user has no problem from home and no one else is really reporting any problems.

 

[burtsbees]

Hmmmhow long has this been happening, and has he/she ever been able to connect and RDC from Japan?

Burt

 

[jshoker]

Sorry for the late response. But he can get in from our Japanese Office, usually. I will be checking with him later today to see if he was able to connect properly. Currently it is around 2:30 in the AM.

 

[drew1701d]

Have you had the user try IPSec over TCP instead of the default IPSec over UDP?
As IPSec over TCP is ideal for the road warrior users like the ones I have who connect from everywhere, while IPSec over UDP is ideal for the home users and places where a firewall won't interfere.
You will of course have to open the TCP Port 10000 for this to work.

"I'm certifiable, not certified. It just means my answers are from experience...not a book

 

[jshoker]

IPSEC over TCP worked. Thanks "drew". I knew about the TCP settings in the client, but I didn't think it would help. I got the user to try it and it worked. So thanks again. Hopefully this will help others as well.