Cisco VPN kills home network connectivity

[frenchpeter]

I have a small home network on an NT4SP6 server. I use Cisco VPN client 4 to connect through to my office network in UK. This side of things works very well as I can access and manage all computers on the office network (normally via VNC viewer).

The problem is on the home network. Any computer that I use the Cisco VPN client on (all running XP professional)becomes inaccessible from other home network computers regardless of whether or not the Cisco VPN client application is actually connected. The lack of accessibility continues despite the computer being re-started and, indeed, in the case of one computer, even after the Cisco client has been uninstalled. Communication to other computers on the home network seems unaffected and communication between other computers on the home network is normal.

A second issue is that, whilst the VPN client is connected, access from the computer running the VPN client to mapped drives on my home network becomes unpredictable. A lot of the time the access is fine but then, at some time during the VPN connection to UK, the locally mapped drives will suddenly become inaccessible. I then have to disconnect my VPN session which normally, but not always, gives access back on the mapped drives.

I would really appreciate any thoughts on these problems.

 

[pulsar1]

It sounds like you need to have split tunneling enabled. This needs to be done at the remote side, in your case the UK when the Cisco hardware lives. Once this happens you then need to configure you client for split tunneling as well. Be aware that some sites reuse to enable split tunneling as it exposes a security risk from the remote side.

 

[frenchpeter]

Hi Pulsar,

Many thanks for your input. I have looked on the forum for some information on split tunneling and the guidance on setting up the client end. The suggestion is that I find this under the properties for my connection then /network/tcpip/advanced. I have none of this. I am using Cisco VPN client 4.0.1. I have seen elsewhere that I should be using at least 4.6 with XP service pack 2. Is this right?

Regards

 

[Supergrrover]

Split tunneling must be enabled on the head end device. If they (your work) don't allow the split tunnel on their device then there is no way around it (other than having another PC or using a VM.)



Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[frenchpeter]

Thank you Brent for your input. I am going to try a slightly different route first - investigating whether we have the same issue on another home site where two or more computers connect to the office but do not use VPN client at all - the connection there is a LAN to LAN connection on their router.

Regards

Peter

 

[Supergrrover]

Try it out and see. I re-read your post and some of the behavior is strange. Do they have access to the latest VPN client?


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[frenchpeter]

Hi Brent,

We do not have anything later than 4.0.1. I have tried Cisco but do not have sufficient status!! I alwys think it a bit strange when a supplier restricts updates for their software in this way. I am trying a Cisco partner on Monday.

Regards

Peter

 

[burtsbees]

The latest VPN client is a free download---registration with CCO is free---you don't have to have a SmartNet contract to register and download the VPN client software. There are a few other software packages that are free as well, such as SDM/ASDM.

Burt

 

[frenchpeter]

Hi Burt,

I am perhaps being thick but what is CCO. I tried following a link from from yahoo but still came up with being asked for a username and password. Where do I actually regisetr please?

Regards

Peter

 

[burtsbees]

http://tools.cisco.com/RPF/register/register.do

Burt

 

[frenchpeter]

Hi Burt

That is where I registered the other day. However, this is where I do not have any of the required credentials to get to the software downloads.

Regards

Peter

 

[burtsbees]

Here's a good link...

http://www.helpdesk.ugent.be/vpn/en/akkoord.php

Burt