[c-nsp] vpn issue with 6509

Matthew Simpson matthew at coreip.net
Mon Oct 15 21:02:19 EDT 2007


Dear list,

I'm trying to allow access to a private IP numbered area of my network 
to Windows clients using PPTP VPN on a 6509 router.  I have set up the 
VPN in IOS and I can get connected to the VPN successfully using a 
Windows client.  I can ping the router from the Windows client.  I can 
ping the Windows client from the router.  But, the rest of my network 
cannot see the Windows client, and my windows client cannot see the rest 
of my network.

I am using IOS 12.1-27b on a sup2.

Here is my vpn config:
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
  accept-dialin
   protocol pptp
   virtual-template 1
!
interface Virtual-Template1
  ip unnumbered Vlan8
  no keepalive
  peer default ip address pool test
  ppp authentication pap
!
interface Vlan8
  description DFWGSX01 Primary 192.168.25.xxx
  ip address 192.168.25.1 255.255.255.0
!
ip local pool test 192.168.25.100 192.168.25.110

My goal is to allow the VPN clients to access machines inside Vlan8, all 
of which are in the 192.168.25.0/24 ip range.

When a windows client connects, it will get an ip address out of the 
pool (ex, 192.168.25.100), and as I said, I can ping 192.168.25.1 which 
is the router.  The router can ping 192.168.25.100, the client.  But I 
cannot ping 192.168.25.254 from the client.

Thank you in advance for any assistance,
Matthew


More information about the cisco-nsp mailing list