The tag has no wiki summary.

learn more… | top users | synonyms

9
votes
2answers
21k views

Cisco AnyConnect SSL VPN client allows local LAN access, but not on additional multi-homed server

We have a machine for connecting via Cisco SSL VPN (\\speeder). i can ping our our speeder on 10.0.0.3: The routing table on \\speeder shows the multiple IP addresses we have assigned to it: ...
7
votes
6answers
5k views

Cisco VPN Client for Windows

is there any Free Cisco VPN Client software for Windows ?
6
votes
1answer
5k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
5
votes
3answers
9k views

Cisco 877 as a VPN server?

I have a Cisco 877 router which connects my network to the Internet using an ADSL line, a single public IP address and NAT; the IOS version is 15. Everything is working ok, but I'd like to configure ...
5
votes
1answer
1k views

IPv6 over Cisco IPSec VPN?

We use a Cisco ASA 5505 as the firewall and IPSec VPN endpoint on our network. We use split-tunneling to reduce the load on our internet link. In other words, when someone is connected to the VPN ...
4
votes
4answers
3k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
4
votes
3answers
4k views

Does Windows 7 VPN work with a Cisco ASA 5510

We have a Cisco ASA 5510 router and are trying to get a couple users setup for VPN access. They are running Windows 7 x64 at home and cannot install the VPN client we have for our router (it only ...
4
votes
2answers
6k views

How to make iPhone Cisco VPN client work with ASA with certificate authentication

I have an ASA that's providing IPsec VPN services using certificate authentication (no xauth, just the certs). It works perfectly with the Cisco IPsec VPN Client. Now I'm trying to let iPhones ...
4
votes
2answers
11k views

How can Mac users change their Windows Active Directory passwords over a VPN connection?

In our office, we are running some Windows servers running an Active Directory domain . We've got a a number of security policies that we enforce, including a 180 day password expiration policy. ...
4
votes
5answers
13k views

Unable to access local network when Cisco VPN client is connected

I'm a developer and don't have much networking expertise, so bear with me. I'm using the Cisco VPN Client 5.0.02.0090 to connect to my work's VPN that way I can RDP into my work computer. Once ...
4
votes
1answer
240 views

Possible to have DHCP hand out different DNS server address when using different tunnel?

We have several ASA 5505 deployed. Currently, we have a setup where the local ASA is answering DHCP queries and is configuring clients with two DNS servers: our DR site DNS server (we use AD) and a ...
4
votes
1answer
2k views

Nmap ping scan over a VPN tunnel return all hosts alive?

I'm curious as to why running an nmap -sP (ping scan) on a remote subnet linked via a Cisco site-to-site IPSec tunnel returns "host up" status for every IP in the range. [root@xt ~]# nmap -sP ...
4
votes
4answers
3k views

Cisco PIX 515e dropping IPSEC tunnels to ASA 5505 over time

We have a Head-Office/Branch-Office WAN like this, Server LAN <-> Cisco PIX 515e <-VPN tunnel-> Cisco ASA 5505 <-> Client LAN 1 <-VPN tunnel-> ...
3
votes
4answers
9k views

Cisco VPN client for WIndows 7 x64

Does anyone know what my options are for a Cisco compatible VPN client on Windows 7 x64? It doesnt look like the standard one is supported on x64 at all (let alone Windows 7) and the Cisco VPN ...
3
votes
2answers
10k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
3
votes
3answers
3k views

able to dig a hostname but doesn't resolve via ssh or ping

I am using Snow Leopard and cannot ping or ssh into a host but am able to dig: dig some.value.host.com When the ip address comes back in the answer section, then I am able to ssh via ip address ( ...
3
votes
1answer
8k views

Multiple Set Peer for VPN Failover

I will have two Cisco routers at Location A serving the same internal networks, and one router in location B. Currently, I have one router in each location with a IPSec site-to-site tunnel connecting ...
3
votes
1answer
2k views

Cisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnet

I am connecting to a ASA5505 at from home to the head-office using L2TP VPN. Head-office then connects to a other-office via a site-to-site IPSEC tunnel. When in the head-office (192.168.100.0/24) I ...
3
votes
2answers
1k views

Replacement/upgrade for RV082 wired router with VPN access

Current Configuration We have two sites that are connected via a gateway-to-gateway VPN tunnel using Cisco RV082 routers. We also have VPN access using QuickVPN for our Windows employees and PPTP for ...
3
votes
3answers
11k views

How to troubleshoot Cisco VPN Client Authentication Error 413?

I'm a software developer contractor, and I've been given Cisco VPN access to a customer's network. It's a typical set up, using an RSA SecureID soft token, and I'm successfully able to connect ...
2
votes
5answers
4k views

As soon as I connect via VPN I lose internet access

I am currently running Windows 7 32bit. I have both the Cisco VPN client and the Shrew Soft VPN client, both work as expected. The only problem is that I lose connection with the internet so I ...
2
votes
2answers
800 views

View unknown IPsec pre-shared key

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it. IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not ...
2
votes
3answers
3k views

Cisco VPN Client Behind ASA 5505

I'm trying to get connected to another ASA via Cisco VPN Client. I am behind an ASA 5505 myself and I am tryihng to VPN to a 5510. I get the message: Secure VPN Connection terminated locally by the ...
2
votes
2answers
14k views

show user list command cisco 5500 ASA

simple issue.. I'm a noob I am running a cisco 5500 ASA which is used to manage a VPN, I need the command used to check the current user list. I think it might be an 'access-list', if so I have no ...
2
votes
6answers
1k views

Work-around for VPN network access restrictions

I connect to a client's network via the Cisco VPN client. Once I connect, my local network access (including internet access) is disabled. Is there a way to get around this, besides for them to ...
2
votes
1answer
71 views

What method can I use to manage hundreds of VPNs/Remote Connections to servers outside my network?

Problem We support hundreds of clients and have access to many of their servers via VPN/RDP (SSL VPN, Cisco VPN, MS VPN, etc.). The other kicker to this is we have to be able to let support employees ...
2
votes
2answers
2k views

How can I prevent inside hosts from taking ISAKMP and IPSec NAT-T ports on 8.4 ASA5510?

I have configured a Remote Access VPN on my ASA5510 running 8.4 and enabled it on the outside interface. For some reason if an inside host uses a VPN client to connect through the firewall they end ...
2
votes
3answers
12k views

How to configure Cisco VPNUI shortcut to open a specific host?

How do I configure the Cisco VPNUI client as a shortcut to open a specific host? As far as I can tell, the program doesn't take an command line arguments, or does it? The problem is that the ...
2
votes
3answers
4k views

Why isn't my ip helper-address helping?

I have a hub site with a Cisco 2811 and several remote sites, running a mixture of Cisco 851 and 871 routers configured for site-to-site VPN. I am in the process of adding DHCP scopes and DNS zones ...
2
votes
3answers
4k views

How to monitor Cisco IPsec VPN with Nagios?

How to monitor Cisco IPsec VPN with Nagios? I want to check if a user can connect to VPN.
2
votes
3answers
3k views

VPN packet capture on ASA5505

Following up from a previous question regarding how to capture packets on the ASA5505 I'm having some difficulty in distinguishing which traffic has come through the VPN and which was generated from ...
2
votes
2answers
782 views

Need to VPN from LAMP webserver using .pcf. Is Cisco's linux client the only way?

First off, I'm a VPN noob. We have a web server (via MediaTemple) that is running Plesk. Our client gave us .pcf files to connect to their VPN, which work locally with my mac Cisco VPN client. ...
2
votes
1answer
971 views

Cisco QuickVPN Can't view local computers

I am connected to my QuickVPN connection to my RV180 VPN Router and I can access the router via IP but I can't find or see any of the computers. How can I fix that? Do I need to do some more advanced ...
2
votes
1answer
1k views

Cisco ASA - VPN and Hairpinning

We have 2 sites that will be linked by a IPSEC VPN between 2 Cisco ASAs: Site 1 8Mb ADSL Connection Cisco ASA 505 Site 2 2Mb SDSL Connection Cisco ASA 505 Basically, both sites need access to a ...
2
votes
1answer
10k views

How can I forward ALL traffic over a site-to-site VPN on Cisco ASA?

I currently have two Cisco ASA 5100 routers. They are at different physical sites and are configured with a site-to-site VPN which is active and working. I can communicate with the subnets on either ...
2
votes
1answer
10k views

Cisco ASA 5505 site to site IPSEC VPN won't route from multiple LANs

Hi I've set up a standard site to site VPN between 2 ASA 5505s (using the wizard in ASDM) and have the VPN working fine for traffic between Site A and Site B on the directly connected LANs. But this ...
2
votes
1answer
667 views

VPN with NAT-T between OpenBSD and Microsoft ISA

A customer of ours is setting up an ISA-Cluster in private network address range and we have to build a VPN connection with them. There is no way avoiding NAT-T and this is where we get to a problem: ...
2
votes
0answers
25 views

Stream IPTV through SSL VPN

I have a question about streaming IPTV through Cisco ASA5510 ssl vpn. My current setup at the moment is: Public - firewall (asa5510) - L3 switch - L2 switch But my iptv source feed is coming to L3 ...
2
votes
1answer
788 views

Setup Cisco ASAs WebVPN on a different IP Address than the Outside IP

Out customer has a SSL VPN solution called "SSL Explorer", it's a server based application which runs on a DMZ Hosts. Because the Software has been announced to be end-of-life, we want to migrate to ...
1
vote
3answers
368 views

cisco vpn client for mac

What Mac application should I use to allow me to connect to Cisco VPN?
1
vote
2answers
812 views

Sharing Cisco VPN connection with network peers

We have a Windows Seven host with Cisco VPN Client access configured. We want to share this connection with some linux machines. We tried sharing the Lan connection (GUI option), then adding the ...
1
vote
4answers
8k views

Phase 2 Mismatch when connecting Windows 7 to ASA5505 VPN

I'm trying to stand up a new ASA5505 on our network (previously we used IPCop), and I'm having a bit of an issue getting the VPN to work. I ran through the IPSec VPN wizard in ASDM (6.3) on the ASA ...
1
vote
3answers
1k views

Problem with installing Cisco VPN Client on Windows 7

When attempting to install Cisco VPN version 4.9.01, I am getting the following error: The driver is blocked due to compatibility issues Driver: Deterministic Networks Publisher: Deterministic ...
1
vote
1answer
296 views

How to configure remote IP address audit logging for VPN clients on a Cisco 2801

We have a Cisco 2801 that also acts as a VPN Server for Cisco VPN Client. We would like to configure IP address logging so that each time a user connects using VPN we would like to log his IP Address. ...
1
vote
2answers
3k views

AES Encryption License for ASA series?

I'm trying to set up a VPN and am struggling a little. I've googled some of the lines in the log and someone suggested that to use AES encryption I have to purchase a license from Cisco. Can anyone ...
1
vote
2answers
1k views

What's the purpose of setting the static IP entries in a Linksys RV082 router?

I'm wanting to configure our Linksys RV082 wired router as our primary DHCP server and then have our Linksys WRT54G wireless router as a secondary DHCP server. My plan is to have them serve different ...
1
vote
2answers
567 views

Resetting Cisco VPN on a Mac?

Sometimes our Macs will get Error 51: Unable to communicate with the VPN subsystem. Please make sure that you have at least one network interface that is currently active and has an IP address and ...
1
vote
1answer
786 views

Cisco ASA 5505 as a client

I want to replace a vpnc client with a Cisco ASA 5505. Is it possible to use the Cisco ASA 5505 running version 8.2(5) as a VPN client (not site-to-site)? If so, please point me to the instructions or ...
1
vote
2answers
387 views

Alternative routers to the Cisco SA 500

We are evaluating the Cisco SA 500 router for our new office router. Would anyone recommend another similarly-featured router from another manufacturer? Requirements: - Office of 14 people - We are ...
1
vote
1answer
764 views

Cisco 2901 - IPSec VPN Maxing CPU

We have a Cisco 2901 on the edge of a 100Mbps/100Mbps WAN link which is providing an endpoint for an IPSec VPN to a Juniper SSG 550M. The problem is that we are seeing a max of 'only' 40Mbps over the ...