don't have handy yet but it looks normal. as u've noticed in the configuration example , there is also a split tunneling so in route print i see split-tunnel too.
On Sun, Jun 26, 2011 at 9:49 PM, Piotr Matusiak <[email protected]> wrote: > can you paste "route print " command output on windows host after vpn > client connection? > > > > 2011/6/26 Serious CCIE <[email protected]> > >> Hi Piotr, thanks. >> >> The configuration is the same as COPY & paste of below link: >> >> >> http://www.cisco.com/en/US/docs/routers/access/1800/1841/software/configuration/guide/ezvpn_ps5855_TSD_Products_Configuration_Guide_Chapter.html#wp1050158 >> >> >> the only changes that I made to this - added subnet mask command to below >> config >> >> crypto isakmp client configuration group VPN1 >> >> acl SPLIT_T >> >> ip access-list extended SPLIT_T >> >> permit ip 192.168.0.0 0.0.255.255 any >> >> key cisco123 >> >> dns 192.168.168.183 192.168.226.120 >> >> wins 192.168.179.89 192.168.2.87 >> >> domain cisco.com >> >> pool VPN-POOL >> >> save-password >> >> >> >> On Sun, Jun 26, 2011 at 1:26 AM, Piotr Matusiak <[email protected]> wrote: >> >>> can you paste your config and related commands output? >>> >>> in general to make it work on IOS you must use "netmask" command and to >>> make it work on ASA you must add netmask to "ip local pool" command. >>> >>> Regards, >>> Piotr >>> >>> >>> 2011/6/25 Serious CCIE <[email protected]> >>> >>>> Hi Everyone - thanks for the replies... >>>> I was trying to do it on ASA. >>>> >>>> @ Piotr - I've tried that but I was still getting /32 - any idea? >>>> >>>> >>>> "I have tried putting subnet mask in client config on Server but still I >>>> get /32 bit subnet mask." >>>> >>>> >>>> On Fri, Jun 24, 2011 at 2:35 AM, Piotr Matusiak <[email protected]> wrote: >>>> >>>>> if this is IOS then under group configuration there is "netmask" >>>>> command. >>>>> >>>>> Regards, >>>>> Piotr >>>>> >>>>> >>>>> 2011/6/23 Serious CCIE <[email protected]> >>>>> >>>>>> VPN-SERVER-------------Internet---------VPN-CLIENT >>>>>> >>>>>> Is it possible when client get's an IP address from the POOL1 have a >>>>>> subnet mask of 255.255.255.0 for example? >>>>>> >>>>>> In most cases when client dials into the server it gets an IP address >>>>>> and the default subnet mask of /32 (192.159.1.39/255.255.255.255) >>>>>> >>>>>> I have tried putting subnet mask in client config on Server but still >>>>>> I get /32 bit subnet mask. >>>>>> >>>>>> thanks >>>>>> >>>>>> _______________________________________________ >>>>>> For more information regarding industry leading CCIE Lab training, >>>>>> please visit www.ipexpert.com >>>>>> >>>>>> Are you a CCNP or CCIE and looking for a job? Check out >>>>>> www.PlatinumPlacement.com >>>>>> >>>>> >>>>> >>>> >>> >> >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
