The tag has no wiki summary.

learn more… | top users | synonyms

8
votes
2answers
17k views

Cisco AnyConnect SSL VPN client allows local LAN access, but not on additional multi-homed server

We have a machine for connecting via Cisco SSL VPN (\\speeder). i can ping our our speeder on 10.0.0.3: The routing table on \\speeder shows the multiple IP addresses we have assigned to it: ...
7
votes
6answers
5k views

Cisco VPN Client for Windows

is there any Free Cisco VPN Client software for Windows ?
5
votes
3answers
9k views

Cisco 877 as a VPN server?

I have a Cisco 877 router which connects my network to the Internet using an ADSL line, a single public IP address and NAT; the IOS version is 15. Everything is working ok, but I'd like to configure ...
5
votes
1answer
1k views

IPv6 over Cisco IPSec VPN?

We use a Cisco ASA 5505 as the firewall and IPSec VPN endpoint on our network. We use split-tunneling to reduce the load on our internet link. In other words, when someone is connected to the VPN ...
4
votes
4answers
3k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
4
votes
3answers
3k views

Does Windows 7 VPN work with a Cisco ASA 5510

We have a Cisco ASA 5510 router and are trying to get a couple users setup for VPN access. They are running Windows 7 x64 at home and cannot install the VPN client we have for our router (it only ...
4
votes
2answers
6k views

How to make iPhone Cisco VPN client work with ASA with certificate authentication

I have an ASA that's providing IPsec VPN services using certificate authentication (no xauth, just the certs). It works perfectly with the Cisco IPsec VPN Client. Now I'm trying to let iPhones ...
4
votes
2answers
7k views

How can Mac users change their Windows Active Directory passwords over a VPN connection?

In our office, we are running some Windows servers running an Active Directory domain . We've got a a number of security policies that we enforce, including a 180 day password expiration policy. ...
4
votes
1answer
1k views

Nmap ping scan over a VPN tunnel return all hosts alive?

I'm curious as to why running an nmap -sP (ping scan) on a remote subnet linked via a Cisco site-to-site IPSec tunnel returns "host up" status for every IP in the range. [root@xt ~]# nmap -sP ...
4
votes
4answers
3k views

Cisco PIX 515e dropping IPSEC tunnels to ASA 5505 over time

We have a Head-Office/Branch-Office WAN like this, Server LAN <-> Cisco PIX 515e <-VPN tunnel-> Cisco ASA 5505 <-> Client LAN 1 <-VPN tunnel-> ...
3
votes
4answers
9k views

Cisco VPN client for WIndows 7 x64

Does anyone know what my options are for a Cisco compatible VPN client on Windows 7 x64? It doesnt look like the standard one is supported on x64 at all (let alone Windows 7) and the Cisco VPN ...
3
votes
2answers
7k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
3
votes
3answers
2k views

Cisco 2811 manual/commands

I've got a small problem regarding a 2811 Cisco router. First of all, I can't a full manual. I found a couple of support pages on the Cisco webpage which is not bad, but I get redirects everywhere. ...
3
votes
5answers
10k views

Unable to access local network when Cisco VPN client is connected

I'm a developer and don't have much networking expertise, so bear with me. I'm using the Cisco VPN Client 5.0.02.0090 to connect to my work's VPN that way I can RDP into my work computer. Once ...
3
votes
1answer
1k views

Cisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnet

I am connecting to a ASA5505 at from home to the head-office using L2TP VPN. Head-office then connects to a other-office via a site-to-site IPSEC tunnel. When in the head-office (192.168.100.0/24) I ...
3
votes
1answer
7k views

Multiple Set Peer for VPN Failover

I will have two Cisco routers at Location A serving the same internal networks, and one router in location B. Currently, I have one router in each location with a IPSec site-to-site tunnel connecting ...
3
votes
3answers
5k views

How to troubleshoot Cisco VPN Client Authentication Error 413?

I'm a software developer contractor, and I've been given Cisco VPN access to a customer's network. It's a typical set up, using an RSA SecureID soft token, and I'm successfully able to connect ...
3
votes
0answers
3k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
2
votes
5answers
4k views

As soon as I connect via VPN I lose internet access

I am currently running Windows 7 32bit. I have both the Cisco VPN client and the Shrew Soft VPN client, both work as expected. The only problem is that I lose connection with the internet so I ...
2
votes
2answers
591 views

View unknown IPsec pre-shared key

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it. IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not ...
2
votes
3answers
3k views

Cisco VPN Client Behind ASA 5505

I'm trying to get connected to another ASA via Cisco VPN Client. I am behind an ASA 5505 myself and I am tryihng to VPN to a 5510. I get the message: Secure VPN Connection terminated locally by the ...
2
votes
2answers
11k views

show user list command cisco 5500 ASA

simple issue.. I'm a noob I am running a cisco 5500 ASA which is used to manage a VPN, I need the command used to check the current user list. I think it might be an 'access-list', if so I have no ...
2
votes
6answers
1k views

Work-around for VPN network access restrictions

I connect to a client's network via the Cisco VPN client. Once I connect, my local network access (including internet access) is disabled. Is there a way to get around this, besides for them to ...
2
votes
2answers
1k views

How can I prevent inside hosts from taking ISAKMP and IPSec NAT-T ports on 8.4 ASA5510?

I have configured a Remote Access VPN on my ASA5510 running 8.4 and enabled it on the outside interface. For some reason if an inside host uses a VPN client to connect through the firewall they end ...
2
votes
3answers
9k views

How to configure Cisco VPNUI shortcut to open a specific host?

How do I configure the Cisco VPNUI client as a shortcut to open a specific host? As far as I can tell, the program doesn't take an command line arguments, or does it? The problem is that the ...
2
votes
3answers
3k views

Why isn't my ip helper-address helping?

I have a hub site with a Cisco 2811 and several remote sites, running a mixture of Cisco 851 and 871 routers configured for site-to-site VPN. I am in the process of adding DHCP scopes and DNS zones ...
2
votes
3answers
3k views

How to monitor Cisco IPsec VPN with Nagios?

How to monitor Cisco IPsec VPN with Nagios? I want to check if a user can connect to VPN.
2
votes
3answers
3k views

VPN packet capture on ASA5505

Following up from a previous question regarding how to capture packets on the ASA5505 I'm having some difficulty in distinguishing which traffic has come through the VPN and which was generated from ...
2
votes
3answers
2k views

able to dig a hostname but doesn't resolve via ssh or ping

I am using Snow Leopard and cannot ping or ssh into a host but am able to dig: dig some.value.host.com When the ip address comes back in the answer section, then I am able to ssh via ip address ( ...
2
votes
2answers
777 views

Need to VPN from LAMP webserver using .pcf. Is Cisco's linux client the only way?

First off, I'm a VPN noob. We have a web server (via MediaTemple) that is running Plesk. Our client gave us .pcf files to connect to their VPN, which work locally with my mac Cisco VPN client. ...
2
votes
1answer
637 views

Cisco QuickVPN Can't view local computers

I am connected to my QuickVPN connection to my RV180 VPN Router and I can access the router via IP but I can't find or see any of the computers. How can I fix that? Do I need to do some more advanced ...
2
votes
1answer
988 views

Cisco ASA - VPN and Hairpinning

We have 2 sites that will be linked by a IPSEC VPN between 2 Cisco ASAs: Site 1 8Mb ADSL Connection Cisco ASA 505 Site 2 2Mb SDSL Connection Cisco ASA 505 Basically, both sites need access to a ...
2
votes
1answer
9k views

How can I forward ALL traffic over a site-to-site VPN on Cisco ASA?

I currently have two Cisco ASA 5100 routers. They are at different physical sites and are configured with a site-to-site VPN which is active and working. I can communicate with the subnets on either ...
2
votes
1answer
9k views

Cisco ASA 5505 site to site IPSEC VPN won't route from multiple LANs

Hi I've set up a standard site to site VPN between 2 ASA 5505s (using the wizard in ASDM) and have the VPN working fine for traffic between Site A and Site B on the directly connected LANs. But this ...
2
votes
1answer
641 views

VPN with NAT-T between OpenBSD and Microsoft ISA

A customer of ours is setting up an ISA-Cluster in private network address range and we have to build a VPN connection with them. There is no way avoiding NAT-T and this is where we get to a problem: ...
2
votes
1answer
703 views

Setup Cisco ASAs WebVPN on a different IP Address than the Outside IP

Out customer has a SSL VPN solution called "SSL Explorer", it's a server based application which runs on a DMZ Hosts. Because the Software has been announced to be end-of-life, we want to migrate to ...
1
vote
3answers
362 views

cisco vpn client for mac

What Mac application should I use to allow me to connect to Cisco VPN?
1
vote
2answers
446 views

Sharing Cisco VPN connection with network peers

We have a Windows Seven host with Cisco VPN Client access configured. We want to share this connection with some linux machines. We tried sharing the Lan connection (GUI option), then adding the ...
1
vote
4answers
7k views

Phase 2 Mismatch when connecting Windows 7 to ASA5505 VPN

I'm trying to stand up a new ASA5505 on our network (previously we used IPCop), and I'm having a bit of an issue getting the VPN to work. I ran through the IPSec VPN wizard in ASDM (6.3) on the ASA ...
1
vote
3answers
1k views

Problem with installing Cisco VPN Client on Windows 7

When attempting to install Cisco VPN version 4.9.01, I am getting the following error: The driver is blocked due to compatibility issues Driver: Deterministic Networks Publisher: Deterministic ...
1
vote
1answer
223 views

How to configure remote IP address audit logging for VPN clients on a Cisco 2801

We have a Cisco 2801 that also acts as a VPN Server for Cisco VPN Client. We would like to configure IP address logging so that each time a user connects using VPN we would like to log his IP Address. ...
1
vote
2answers
563 views

Resetting Cisco VPN on a Mac?

Sometimes our Macs will get Error 51: Unable to communicate with the VPN subsystem. Please make sure that you have at least one network interface that is currently active and has an IP address and ...
1
vote
1answer
672 views

Cisco ASA 5505 as a client

I want to replace a vpnc client with a Cisco ASA 5505. Is it possible to use the Cisco ASA 5505 running version 8.2(5) as a VPN client (not site-to-site)? If so, please point me to the instructions or ...
1
vote
2answers
385 views

Alternative routers to the Cisco SA 500

We are evaluating the Cisco SA 500 router for our new office router. Would anyone recommend another similarly-featured router from another manufacturer? Requirements: - Office of 14 people - We are ...
1
vote
1answer
164 views

Cisco 2901 - IPSec VPN Maxing CPU

We have a Cisco 2901 on the edge of a 100Mbps/100Mbps WAN link which is providing an endpoint for an IPSec VPN to a Juniper SSG 550M. The problem is that we are seeing a max of 'only' 40Mbps over the ...
1
vote
2answers
2k views

Random VPN Client unable to contact the security gateway

We are issuing new Win764bit Enterprise laptops with the Cisco VPN Client Version 5.0.0.07.0290 installed on it. We are importing a pcf file from a CD given to us by our security group into it before ...
1
vote
1answer
1k views

How can I stop openconnect from changing /etc/resolv.conf?

When I run openconnect (with the default vpnc script) it changes /etc/resolv.conf and it really shouldn't do that. I am just using the VPN for a few specific host not for a full Internet connection.
1
vote
1answer
1k views

Is turning off Perfect Forward Secrecy a security threat?

I had to disable PFS in the IPsec rules on one of our ASAs to allow Android Gingerbread clients to connect. Does doing so compromise the security of the VPN? Communications are AES-256 or AES-128 with ...
1
vote
2answers
4k views

How do I troubleshoot Mac OS X Cisco IPSec VPN not working over a Samsung Verizon 4G LTE WiFi hotspot?

I have Cisco IPSec VPN (to my employer) configured on my MacBook Air. It works perfectly when I'm at home connected through WiFi to my cable modem (through an Airport Extreme). But when I try to ...
1
vote
2answers
681 views

Is it possible to route only part of the traffic through Cisco VPN client?

I have windows Cisco VPN client v5. When I connect, it is cutting my machine from all the network, and I'm virtually in my employers network. Is it possible to send part of the traffic not through the ...