AnyConnect client can not access local network

Hello

I have a problem with the Cisco anyconnect. Once clients are connected they cannot access anything whatsoever, including their default gateway.

Pool of the VPN client is on the same subnet as the LAN (139.16.1.x/24). Local network clients can access DMZ, VPN clients can ping computers on the local network, but they cannot access the DMZ.

I guess that any rule providing that traffic is absent but I m new with Cisco ASA and I m totally lost. I read as much as I could on this topic, but I do not understand which rule is necessary.

Thank you very much in advance for your support.

ASA release 9.4 (1)
!
ciscoasa hostname
activate the encrypted password of WmlxhdtfAnw9XbcA
TA.qizy4R//ChqQH encrypted passwd
names of
mask 139.16.1.50 - 139.16.1.80 255.255.255.0 IP local pool Pool_139
!
interface GigabitEthernet1/1
nameif outside
security-level 0
192.168.1.100 IP address 255.255.255.0
!
interface GigabitEthernet1/2
nameif inside
security-level 100
IP 139.16.1.1 255.255.255.0
!
interface GigabitEthernet1/3
nameif DMZ
security-level 50
IP 172.16.1.1 255.255.255.0
!
interface GigabitEthernet1/4
Shutdown
No nameif
no level of security
no ip address
!
interface GigabitEthernet1/5
Shutdown
No nameif
no level of security
no ip address
!
interface GigabitEthernet1/6
Shutdown
No nameif
no level of security
no ip address
!
interface GigabitEthernet1/7
Shutdown
No nameif
no level of security
no ip address
!
interface GigabitEthernet1/8
Shutdown
No nameif
no level of security
no ip address
!
Management1/1 interface
management only
nameif management
security-level 100
11.11.11.11 IP address 255.255.255.0
!
passive FTP mode
network obj_any object
subnet 0.0.0.0 0.0.0.0
internal subnet object-
139.16.1.0 subnet 255.255.255.0
network dmz subnet object
subnet 172.16.1.0 255.255.255.0
wialon Server external ip network object
Home 192.168.1.132
wialon-Server network objects
Home 172.16.1.69
Wialon-service-TCP object service
destination tcp source between 1 65535 21999 20100 service range
Wialon-service-UDP object service
destination service udp source between 0 65535 21999 20100 range
network of the NETWORK_OBJ_139.16.1.0_25 object
subnet 139.16.1.0 255.255.255.128
outside_acl list extended access permit tcp any object wialon-Server eq www
outside_acl list extended access allowed object Wialon-service-TCP any wialon-server object
outside_acl list extended access allowed object Wialon-service-UDP any wialon-server object
pager lines 24
asdm of logging of information
Outside 1500 MTU
Within 1500 MTU
MTU 1500 DMZ
management of MTU 1500
ICMP unreachable rate-limit 1 burst-size 1
don't allow no asdm history
ARP timeout 14400
no permit-nonconnected arp
NAT (inside, outside) static source any any static destination NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 non-proxy-arp-search to itinerary
!
network obj_any object
dynamic NAT (all, outside) interface
internal subnet object-
NAT dynamic interface (indoor, outdoor)
wialon-Server network objects
NAT (DMZ, external) service wialon Server external ip static tcp www www
Access-group outside_acl in interface outside
Route outside 0.0.0.0 0.0.0.0 192.168.1.1 1
Timeout xlate 03:00
Pat-xlate timeout 0:00:30
Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
Floating conn timeout 0:00:00
identity of the user by default-domain LOCAL
Enable http server
http 11.11.11.0 255.255.255.0 management
http 139.16.1.0 255.255.255.0 inside
No snmp server location
No snmp Server contact
service sw-reset button
Crypto ipsec ikev2 AES256 ipsec-proposal
Protocol esp encryption aes-256
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES192
Protocol esp encryption aes-192
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES
Esp aes encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 proposal ipsec 3DES
Esp 3des encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal OF
encryption protocol esp
Esp integrity sha - 1, md5 Protocol
Crypto ipsec pmtu aging infinite - the security association
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
outside_map interface card crypto outside
Crypto ca trustpoint ASDM_TrustPoint0
registration auto
domain name full ciscoasa.srdongato.null
E-mail [email protected] / * /
name of the object CN = srdongato
Serial number
Proxy-loc-transmitter
Configure CRL
Crypto ca trustpoint ASDM_Launcher_Access_TrustPoint_0
registration auto
full domain name no
name of the object CN = 139.16.1.1, CN = ciscoasa
ASDM_LAUNCHER key pair
Configure CRL
trustpool crypto ca policy
string encryption ca ASDM_TrustPoint0 certificates
certificate 09836256
30820381 30820269 a0030201 02020409 83625630 0d06092a 864886f7 0d 010105
05003050 31123010 06035504 03130973 72646f6e 6761746f 313 has 3012 06035504
05130b4a a 41443139 32323033 34343024 06092, 86 01090216 17636973 4886f70d
636f6173 612e7372 646f6e67 61746f2e 6e756c6c 31353132 30353036 301e170d
5a170d32 33333535 35313230 32303633 3335355a 30503112 30100603 55040313
09737264 6f6e6761 30120603 55040513 31393232 30333434 0b4a4144 746f313a
2a 864886 30240609 f70d0109 6973636f 02161763 6173612e 7372646f 6e676174
6f2e6e75 6c6c3082 0122300d 06092 has 86 01010105 00038201 0f003082 4886f70d
010a 0282 010100d 2 295e679c 153e8b6a d3f6131d 8ea646e3 aa0a5fa9 20e49259
ca895563 7e818047 033a4e8f 57f619e9 fa93bfd5 6c44141f b0abf2c0 8b86334e
bac63f41 99e6d676 c689dcf7 080f2715 038a8e1b 694a00de 7124565e a1948f09
8dbeffab c7c8a028 741c5b10 d0ede5e9 599f38fe 5b88f678 4decdc4b b 353, 6708
cfa2fbce f58be06e 18feba56 4b2b04a1 77773ec6 5c58d2ed d7ca4f17 980f0353
138bfe65 1b1165e6 7b6f94bb ab4d4286 e900178c 147a6dba 2427f38e e225030f
0a66d1eb 5075c57e 6d77e5bb 247f5bc3 8d3530f0 49dedf2d 21a24b5f daa08d98
690183cf e82a6b8d 5e489956 c5eecdbc 7fc2365c b629a52b 126b51e2 18590ed5
c9da8503 a639f102 03010001 a3633061 300f0603 551d 1301 01ff0405 30030101
ff300e06 03551d0f 0101ff04 86301f06 04030201 23 04183016 80143468 03551d
dec79103 0a91b530 1ada7e47 7e27b16d 4186301d 0603551d 0e041604 143468de
c791030a 91b5301a da7e477e 27b16d41 86300d 86f70d01 01050500 06 092 a 8648
003cdb04 03820101 8ef5ed31 c05c684b ad2b0062 96bfd39a ecb0a3fe 547aebe5
14b753e7 89f55827 3d4e0aa8 b8674e45 80d4c023 8e99a7b4 0907d 347 060a2fe4
fa6e0c2f 3b9cd708 a539c09f 7022d2ee fb6e2cf6 82b0e861 a2839a71 1512b3ec
e28664e9 732270c 9 d1c679d9 1eaf2ad5 31c3ff97 09aae869 88677a3d b 007, 5699
ecb3032e 2dd0f74f 81f9a8fb 79f30809 723bbdbf dfef4154 5ad6b012 a8f37093
481fa678 b44b0290 23390036 042828f3 5eefdc43 ebe52d26 78934455 9b4234a9
4146 166e5adc b431f12f 8d0fbf16 46306228 731c bfeebc43 34 76984 d2e6ebbc
88ca120a 96838694 d4f32884 963e7385 987ec6b0 dfa28d49 05ba5fa8 641bcfc7
ff92ac3c 52
quit smoking
string encryption ca ASDM_Launcher_Access_TrustPoint_0 certificates
Certificate 0 is 836256
308202cc a0030201 0202040a 0d06092a 83625630 864886f7 0d 010105 308201b 4
05003028 06035504 03130863 61736131 13301106 03550403 6973636f 3111300f
130a 3133 392e3136 2e312e31 31353132 30353036 35363236 5a170d32 301e170d
35313230 32303635 3632365a 30283111 55040313 08636973 636f6173 300f0603
61311330 11060355 0403130 3133392e 31362e31 2e313082 0122300d 06092 has 86
4886f70d 01010105 00038201 0f003082 010 has 0282 010100e7 a5c16e86 16c15a10
e018b868 bac7271a 30f1a3f8 ecb9c6b8 3ed4b1ad c9468f5e 287f2a7a 644f1496
c43a061e da927d09 a755b53e ed7c6a66 f2f1fb1e f944345c 86e08ce0 891c99b3
13101ab3 04963fad f91f987f 99f22a89 cd1e8c5a 5e4c026d 2cadd7b7 6620bbd1
b4a5135b 24ec886f fa061a06 dd536e96 1e483730 756c 4101 23f83a8d 944a7fbe
93c51d56 32ac0d17 ceb75f63 0ae24f07 f2c54e83 5b84ff00 16b0b899 c925c737
1765b 066 23 b 54645 bc419684 d09dd130 c1479949 68b0a779 df39b078 6fb0deb9
758b14c3 f0801faf f0ad60e1 a018ffba d769f867 3fe8e5fc 88ccc5b2 2319f5d4
617a78c4 74e7a64b 5c68276c 06ea57c1 d0ffce4b 358c4d02 03010001 300 d 0609
2a 864886 05050003 82010100 dff97c9f 4256fd47 8eb661fd d22ecea4 f70d0101
589eff09 958e01f1 a435a20e 5ed1cf19 af42e54d d61fc0ab cb2ee7ac 7fcb4513
1a44cc86 1e020d72 3a3f78d2 4 d 225177 857093d 9 f5fcf3c7 6e656d2b 54a0c522
f636b8cf 33c5ae34 ea340f32 85dff4c1 50165e7a e94de10b ced15752 0b3a76c1
2a50777b 20291106 a1a8a214 a 8 003716 680c15d4 ac3f7cc7 378f8f5f 38e3403f
f958c095 e549c8ed 4baf8cc5 bdcd230e 260754ea 953c3a4c eb01fef5 62b97e01
9f82ce6b f479dbdd 000c45af 8758b35f b4a958ee 32c4db3f 2ddc7385 dc05b0e3
78b609ba a9280841 2433ae87 5dd7a7c2 d5691068 1dc0eddc c23f99c5 3df8b1a5
aadbd82a 423f4ba8 563142bf 742771c 3
quit smoking
IKEv2 crypto policy 1
aes-256 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 10
aes-192 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 20
aes encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 30
3des encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 40
the Encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
Crypto ikev2 activate out of service the customer port 443
Crypto ikev2 access remote trustpoint ASDM_TrustPoint0
Telnet 139.16.1.0 255.255.255.0 inside
Telnet 11.11.11.0 255.255.255.0 management
Telnet timeout 5
without ssh stricthostkeycheck
SSH timeout 5
SSH group dh-Group1-sha1 key exchange
Console timeout 0
dhcpd outside auto_config
!
dhcpd address 172.16.1.69 - DMZ 172.16.1.69
dhcpd dns 87.216.1.65 87.216.1.66 DMZ interface
dhcpd option 3 ip 172.16.1.1 DMZ interface
dhcpd enable DMZ
!
a basic threat threat detection
Statistics-list of access threat detection
no statistical threat detection tcp-interception
SSL-trust outside ASDM_TrustPoint0 point
SSL-trust ASDM_Launcher_Access_TrustPoint_0 inside point
Trust ASDM_Launcher_Access_TrustPoint_0 inside the vpnlb-ip SSL-point
WebVPN
allow outside
AnyConnect image disk0:/anyconnect-win-3.1.12020-k9.pkg 1
AnyConnect profiles Wialon_client_profile disk0: / Wialon_client_profile.xml
AnyConnect enable
tunnel-group-list activate
Disable error recovery
internal GroupPolicy_Wialon group strategy
attributes of Group Policy GroupPolicy_Wialon
WINS server no
value of 192.168.1.1 DNS server
client ssl-VPN-tunnel-Protocol ikev2
by default no
WebVPN
AnyConnect value Wialon_client_profile type user profiles
dynamic-access-policy-registration DfltAccessPolicy
wialon_1 Wy2aFpAQTXQavfJD username encrypted password
wialon_2 4STJ9bvyWxOTxIyH encrypted password username
remote access to Wialon tunnel-group type
attributes global-tunnel-group Wialon
address pool Pool_139
Group Policy - by default-GroupPolicy_Wialon
tunnel-group Wialon webvpn-attributes
enable Wialon group-alias
!
class-map inspection_default
match default-inspection-traffic
!
!
type of policy-card inspect dns preset_dns_map
parameters
maximum message length automatic of customer
message-length maximum 512
Policy-map global_policy
class inspection_default
inspect the preset_dns_map dns
inspect the ftp
inspect h323 h225
inspect the h323 ras
inspect the rsh
inspect the rtsp
inspect esmtp
inspect sqlnet
inspect the skinny
inspect sunrpc
inspect xdmcp
inspect the sip
inspect the netbios
inspect the tftp
Review the ip options
!
global service-policy global_policy
context of prompt hostname
no remote anonymous reporting call
Cryptochecksum:447ec315ae30818a98f705fb1bf3fd75

Hello

You don't have NAT exemption the DMZ network to the pool of VPN traffic.

Please try to add the following statement to run:

nat (DMZ,outside) 1  source static any any destination static NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 route-lookup
Also please delete the existing instruction manual nat "non-proxy-arp" statement, because it can cause problems like you the ip subnet address pool is identical to that of the Interior of the network.
no nat (inside,outside) source static any any destination static NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 no-proxy-arp route-lookup

nat (inside,outside) 1 source static any any destination static NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 route-lookup

Cordially Véronique

Tags: Cisco Security

Similar Questions

  • Windows XP sp3 can not access the network shares on vista after installing sp2

    I have a xp sp3 computer and another currently running vista Home premium sp2. Previously, I was able to access the network share on the xp computer before vista computer I installed sp1. Both computers were able to ping between them without problem.

    I've upgraded to sp2 because I had problems with windows media center, missing records. Upgrade of these issues fixed, but this means that roll back to sp1 is not an option for me to get operational network.

    Please do not post a standard answer on the network configuration. I am familiar with the standards requirements to share files between xp and vista and everything is set up correctly.  Like I said everything was working fine before the installation of sp2.

    If it is a known problem that is still not resolved, I'd appreciate knowing that information as well.

    Edit: Firewall been disabled during my troubleshooting

    After more work, I was able to solve my problem.  Update zone alarm solved my problem and helped my windows xp machine to access my Vista network shares.  As I pointed out in the original post, zone alarm firewall has been disabled during my troubleshooting.  Apparently, when disabled, the old version of zone alarm has always been the origin of the problem.

  • I can only access local network with WPA/WPA2-PSK compatible. With out security I can connect without any problems.

    Issue of WPA/WPA2-PSK on Vista with SP2

    Belkin F7D2301 router, version1

    Vista Home Premium, Service Pack 2

    Network card: Atheros AR5007 802. 11a / g WiFi. version of the driver. 7.3.201.25.

    I am running 2-1 Vista, 1 Window7 laptop
    IPhone 2
    1 Wii game system

    When I installed initially the new router today, I installed it with WPA - PSK [TKIP] + security WPA2-PSK [AES] option. When in doing so, the Vista Home Premium (32 bit) would not connect to the internet. He would show local only access.

    But when I disable security it can connect to the internet. Rest of my devices are also able to connect to the internet regardless of WPA - PSK [TKIP] + WPA2-PSK [AES] or security number. I am running Vista with SP2.  That seems known problem Vista on Sp1. see http://support.microsoft.com/kb/935222.

    The network adapter I have is an Atheros AR5007 802. 11a / g WiFi with the version of the driver. 7.3.201.25.

    Any help would be very happy... I'm exhausted now try to solve this problem.

    SOLVED by updating the driver for Atheros. Atheros AR5007 802. 11a / g WiFi. It is not available on the official website. Check out this forum.

    http://forums.techguy.org/networking/981134-solved-NETGEAR-WNDR3700-incompatibilty-w.html

    Mysteryis yet to be sloverd

    • Why stop WPA has collaborated with the old version of Atheros AR5007 802. 11a / g WiFi. version of the driver. 7.3.201.25.
    • Why accpeting Linksys WRNT160 V3 ceased any connection.

    Thanks for the support

  • Client can not access adobe to editing in the browser via an external server

    Hello

    I have completed the customer site of Muse and have downloaded on its external host without problem.

    In the site properties, enable editing in the browser is on.

    When I use the same external ftp site you want to connect, I get this:

    Screen Shot 2016-02-01 at 12.22.09.png

    As my clients technician COMPUTER hosts many sites, I asked him to create a unique login for my client.

    If I try to upload the Web site by using this single connection, it is said that the 'folder does not appear to connect to site' & is not that recent changes are not displayed.

    Technician COMPUTER does not know what else to do...

    I'm a designer using Muse, as I have almost no idea re.code. Please can you help me?

    See you soon

    Could you describe a little more how you or your customer download site?

    With most FTP servers, in order to download your Web site correctly, you must set the name of the subfolder on your server, as the root of your FTP space is probably not the root of your site. On most of the servers, it is a folder named "www" or "htdocs" or another mysterious name.

  • Remote vpn client can't access outside networks

    I configured a remote vpn ASA 5510 the wizard remote vpn. Users are able to get the vpn connection and access the internal network; but IMPOSSIBLE to

    access the outside network. (For the internal network, I want to talk about network behind the vpn to ASA, outside networks refers to society outside the ASA).

    In short, the external network of the company has default route to the ROUTER1 points. The ROUTER1 has road for access network and a default route to the internet. The ASA has a default route to the ROUTER1 points. the ROUTER1 also has a route to the address of the user remote vpn refers to the ASA.

    Hope it wise.

    But I don't know if my nat statement is correct. below is my statement of nat, is there something obvious lack? There is no translation network here, routable internet addresses.

    NAT (inside) 0-list of access inside_nat0_outbound

    public static 111.1.0.0 (Interior, exterior) 111.1.0.0 netmask 255.255.255.0

    public static 111.1.1.0 (Interior, exterior) 111.1.1.0 netmask 255.255.255.0

    public static 111.1.2.0 (Interior, exterior) 111.1.2.0 netmask 255.255.255.0

    networks outside the company (111.1.3.0/24; 111.1.4.0/24)

    |

    |

    the user remote vpn <-------------->internet <--------------------->ROUTER1 - ASA - Cat6509 - inside the network

    Any suggestion is appreciated.

    Thank you

    have you enabled "same-security-traffic intra-interface.

  • can not access shared folders & printers in windows 2003 server client XP pro sp3 systems error showing path network not found

    can not access shared folders & printers in windows 2003 server client XP pro sp3 systems error showing network not found path.

    After restarting pc for awhile, we can access shared folder & printer but after 30 minutes (more or less) again cannot access. In the printer folder connected printer displays status as long as it is impossible to connect to the win-2003 server. Please help me out of this problem because I support banking sector.

    Hello

    You can find the Server forums on TechNet support, please create a new post at the following link:

    http://social.technet.Microsoft.com/forums/en/category/WindowsServer/

  • Cisco vpn client to connect but can not access to the internal network

    Hi all

    I have a VPN configured on cisco 5540. My vpn was working fine, but suddenly there is a question that the cisco vpn client to connect but can not access to the internal network

    Any help would be much appreciated.

    Hi Samir,

    I suggest that you go to the ASA and check the configuration to make sure that it complies with the requirements according to the reference below link:

    http://www.Cisco.com/en/us/products/ps6120/products_configuration_example09186a00805734ae.shtml

    (The link above includes split tunneling, but this is just an option.

    Please paste the output of "sh cry ipsec his" here so that we can check if phase 2 is properly trained. I would say as you go to IPSEC vpn client on your PC and check increment in packets sent and received in the window 'status '.

    Let me know if this can help,

    See you soon,.

    Christian V

  • When a user logs off Windows 7 x 64 session, the rest can not access the internet until the restart network card

    Hello! I found a problem with my system: when a user logs off Windows 7 x 64 session, the rest can not access the internet, until restarted network card. Reinstall NIC driver did not help. Problem appears on a built-in adapter, in the motherboard and a separate PCI card too.  Same router via its web interface is not accessible. Windows cannot automatically fix this problem after trying to diagnose a problem with his problem Diagnostic tool. After the diagnosis in the DETAILS window, MORE tests, it displays a message like this "computer remote can not receive a connection via the Internet (HTTP) Service Port". "Unplugging" a corresponding Local network connection and then reconnect solves the problem immediately. Switching between users, when two of them are connected do not cause this problem. Important: the problem occurs in the account of the user who was logged on the system FIRST after the PC was on, when the user disconnected on newspapers of a SECOND. If the SECOND user is logged in and the FIRST user disconnects, SECOND can still access the internet. It depends only on the sequence of the user's record, not on the particular user name. And one more interesting fact: after each user registered on and outside just for once, the problem seems to disappear until the PC is turned off and turn it back on!

    System details:

    Motherboard: ASUS P8Z77-VLK
    CPU: Intel Core i7 3770 K
    RAM: 8 GB
    OS: Windows 7 x 64

    Hi, Mahesh,

    and thank you very much for your help! Update firmware driver and router LAN did not help me get rid of my problem, but greatly improved my experience of networking in general. Anti-virus software was not guilty, also, but! I found the "iControl" network software, installed as part of Sogiciel 'AI Suite II' (that came on the CD of motherboard ASUS driverssoftware), runnning and causing not only the problem mentioned above, but would also decrease upload speed up to 0.3 MB/s, when download passes to nearly 100 Mbps! Moreover, searching the Internet, I have found a lot of complaints about the behavior of this software, so that people watch you the occasional installation of this piece... sweet ;) As "iControl network" has been uninstalled (not only turned off in the settings of 'Ai Suite II'!), I'm totally happy with my system performance.

    Best regards
    Greg

  • My desktop computer shows that it is connected to the network. However I can not access the detained.

    without intwernet access network connection.

    My desktop computer shows that it is connected to the network. However I can not access the detained. Other computers using the wireless modem work fine. I'm NOT computer savvy, so I am at a loss. I ping tri3ed myself and the result is unanswered.

    Hello

    You can consult the following thread link and check.

    PING: transmit failed, error code 5.

    Important: The above link contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs.

    For more information about how to back up and restore the registry, follow the steps from the link below:

    Back up the registry

  • Can not access network drives after installation of Windows 8 Pro

    Hi all

    I have a concern with a PC in Windows 8.

    I am rebuilding a new laptop for a user. Successfully, I added to the domain and assigned privileges for the user. When I try to log on to the PC with the new user account, I can not access network drives. When I log in with my account, I am able to access the network without problem drives.

    When I'm on the user account I can see the other computers on the network as well. But for some reason I can't access network drives. Other computers on the domain are running Windows 7 Professional.Can someone help me with this?

    Thank you

    Hello

    As you are on a domain, I suggest you to post your query in the TechNet forum.

    http://social.technet.Microsoft.com/forums/en-us/w8itpronetworking/threads

    I hope this helps.

  • AnyConnect VPN is not access to the ASA

    Hello

    I have an ASA 5512 - x configured as a hub AnyConnect VPN, but when I connect I can not access the firewall... I can ping the address 10.4.11.2 but I can not connect... No idea what to do? It's the running configuration:

    : Saved

    :

    ASA 1.0000 Version 2

    !

    asa-oi hostname

    domain xx.xx.xx.xx

    activate 7Hb0WWuK1NRtRaEy encrypted password

    2KFQnbNIdI.2KYOU encrypted passwd

    names of

    1.1.1.1 DefaultGW-outside name description default gateway outside

    name 10.4.11.1 description DefaultGW - Default Gateway inside Inside

    !

    interface GigabitEthernet0/0

    nameif inside

    security-level 100

    IP 10.4.11.2 255.255.255.0

    !

    interface GigabitEthernet0/5

    No nameif

    no level of security

    no ip address

    !

    interface GigabitEthernet0/5.2000

    VLAN 2000

    nameif outside

    security-level 0

    IP 1.1.1.2 255.255.255.252

    !

    interface Management0/0

    Shutdown

    No nameif

    no level of security

    no ip address

    management only

    !

    boot system Disk0: / asa861-2-smp - k8.bin

    passive FTP mode

    clock timezone BRST-3

    clock summer-time recurring BRDT 2 Sun Oct 0:00 Sun Feb 3 0:00

    DNS lookup field inside

    DNS domain-lookup outside

    DNS server-group DefaultDNS

    1.1.1.1 server name

    1.1.1.2 server name

    domain xx.xx.xx.xx

    permit same-security-traffic inter-interface

    permit same-security-traffic intra-interface

    network of the PoolAnyConnect object

    subnet 10.6.4.0 255.255.252.0

    access extensive list permits all ip a outside_in

    list of access by standard tunnel allowed 10.0.0.0 255.0.0.0

    pager lines 24

    Enable logging

    timestamp of the record

    exploitation forest-size of the buffer 1048576

    logging buffered information

    asdm of logging of information

    Within 1500 MTU

    Outside 1500 MTU

    mask 10.6.4.1 - 10.6.7.254 255.255.252.0 IP local pool PoolAnyConnect

    ICMP unreachable rate-limit 1 burst-size 1

    ICMP allow any inside

    ICMP allow all outside

    ASDM image disk0: / asdm - 66114.bin

    enable ASDM history

    ARP timeout 14400

    NAT (inside, outside) static source any any static destination PoolAnyConnect PoolAnyConnect non-proxy-arp-search to itinerary

    NAT (exterior, Interior) static source PoolAnyConnect PoolAnyConnect non-proxy-arp-search to itinerary

    Access-group outside_in in external interface

    Route outside 0.0.0.0 0.0.0.0 DefaultGW-outdoor 1

    Route inside 10.0.0.0 255.0.0.0 DefaultGW-Inside 1

    Timeout xlate 03:00

    Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

    Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

    Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

    Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

    timeout tcp-proxy-reassembly 0:01:00

    Floating conn timeout 0:00:00

    dynamic-access-policy-registration DfltAccessPolicy

    AAA-Server LDAP protocol ldap

    AAA-server host 3.3.3.3 LDAP (inside)

    Timeout 5

    LDAP-base-dn o = xx

    LDAP-scope subtree

    LDAP-naming-attribute sAMAccountName

    novell server type

    identity of the user by default-domain LOCAL

    the ssh LOCAL console AAA authentication

    AAA authentication enable LOCAL console

    AAA authentication http LOCAL console

    Enable http server

    http 0.0.0.0 0.0.0.0 inside

    http 2.2.2.2 255.255.255.240 outside

    Telnet timeout 5

    SSH 0.0.0.0 0.0.0.0 inside

    SSH 2.2.2.2 255.255.255.240 outside

    SSH timeout 10

    Console timeout 10

    management-access inside

    a basic threat threat detection

    Statistics-list of access threat detection

    no statistical threat detection tcp-interception

    SSL cipher aes128-sha1 aes256-3des-sha1 sha1

    WebVPN

    allow outside

    AnyConnect essentials

    AnyConnect image disk0:/anyconnect-win-3.1.03103-k9.pkg 1

    AnyConnect enable

    tunnel-group-list activate

    internal GrpPolicyAnyConnect group strategy

    attributes of Group Policy GrpPolicyAnyConnect

    value of server DNS 1.1.1.1 1.1.1.2

    VPN - 1000 simultaneous connections

    client ssl-VPN-tunnel-Protocol

    Split-tunnel-policy tunnelspecified

    Split-tunnel-network-list value in tunnel

    field default value xx.xx.xx.xx

    admin Dp4l7Cmqr7SMHl.l encrypted privilege 15 password username

    tunnel-group AnyConnect type remote access

    tunnel-group AnyConnect General attributes

    address pool PoolAnyConnect

    LDAP authentication group-server

    Group Policy - by default-GrpPolicyAnyConnect

    tunnel-group AnyConnect webvpn-attributes

    enable AnyConnect group-alias

    !

    class-map inspection_default

    match default-inspection-traffic

    !

    !

    type of policy-card inspect dns preset_dns_map

    parameters

    maximum message length automatic of customer

    message-length maximum 512

    Policy-map global_policy

    class inspection_default

    inspect the ftp

    inspect h323 h225

    inspect the h323 ras

    inspect the rsh

    inspect the rtsp

    inspect esmtp

    inspect sqlnet

    inspect the skinny

    inspect sunrpc

    inspect xdmcp

    inspect the sip

    inspect the netbios

    inspect the tftp

    inspect the ctiqbe

    inspect the http

    inspect the dcerpc

    inspect the dns

    inspect the icmp

    inspect the icmp error

    inspect the they

    inspect the amp-ipsec

    inspect the mgcp

    inspect the pptp

    inspect the snmp

    !

    global service-policy global_policy

    context of prompt hostname

    no remote anonymous reporting call

    Cryptochecksum:9399e42e238b5824eebaa115c93ad924

    : end

    BTW, I changed the NAT configuration many attempts the problem, this is the current...

    YPU need to allow your client VPN address pool (10.6.4.1 mask - 10.6.7.254 255.255.252.0) ssh and http from 'outside' access, which is where they come from. Add them to the:

    http 0.0.0.0 0.0.0.0 inside

    http 2.2.2.2 255.255.255.240 outside

    SSH 0.0.0.0 0.0.0.0 inside

    SSH 2.2.2.2 255.255.255.240 outside

  • K550 printer has a static IP address and I can not access!

    Long story short, the bonehead technician, who headed the school in front of me felt that he had to put everything on the static IP, including printers.

    Anyway, we have since got a new ISP that provided us with a router that functions as a DHCP server and automatically assigns IPs to all computers on the network and devices (unless we chose a static ip address manually). The new network streams of 192.168.168.XX while the old network is a completely different game (204.48.224.XX). Unfortunately, printers are still set to the old static IP and I can not access their web configuration pages to change because of their IP and walkways being inaccessible.

    I can connect by USB to a computer and set them up in USB if there's a way. I searched the manual and the help topics and couldn't find what I was looking for.

    Is it possible for me to give back the networking on my printer K550 except in web admin using the? Help, please. I am the only technician here and it's the first day of school. I have quite a few teachers angry on my hand

    I don't know anything about this printer, but I could find on page 46 of the Manual:

    To reset the network settings on the printer (HP Officejet Pro K550dtn/K550dtwn)
    1 press and hold / (the Configuration Page button), press (button) 3 times, and
    release / (the Configuration Page button). The power light flashes for a few seconds. Wait for the
    Power light is on.
    2. press on / (the Configuration Page button) to print the configuration page and verify that the
    network settings have been reset. By default, the name of the network (SSID) is "hpsetup" and the

    mode of communication is "ad hoc".

    You can read it yourself:

    http://74.125.93.132/search?q=cache:-hqin_s_t8EJ:h10032.www1.HP.com/CTG/manual/c00501024.PDF+reset+K550+printer&CD=9&HL=en&CT=clnk&GL=us&client=Firefox-a

  • Can not access the updates XP, 0x8024400A error message.

    I reformatted my HARD drive, reloaded XP SP2 Home. Download IE 8. I need XP SP 3, but now I can not access the updates... 0x8024400A error message.

    Help please

    Hello

    Install SP3 by downloading and running from...

    http://www.Microsoft.com/download/en/details.aspx?displaylang=en&ID=24

    You can ignore the text that says it's for network installations and also ignore the text advising windows/microsoft update if a single update of a PC.

    This should move your 0x8024400A problem. So try and get up-to-date with the Windows updates. You will probably have to go through Genuine Windows Validation.

    Tricky

  • Error 1606: 'could not access location network & AppData%.

    Please help with Error 1606, "could not access location network & APPDATA%\.»  Can someone please provide a fix?

    This problem occurs because there is incorrect entries in the Shell folder of the user who is logged on to Microsoft Windows. When Windows Installer goes to the sale of Shell folder of the user who is logged on to the computer, Windows Installer cannot locate the correct entry. The solution is inhttp://support.microsoft.com/default.aspx/kb/886549.

    The steps to correct this problem involve editing the Windows registry.  Change the settings of the REGISTRY can cause serious problems that may prevent your computer from starting properly. Microsoft cannot guarantee that problems resulting from the REGISTRY settings configuration can be solved. Changes to these settings are at your own risk. I suggest that you first back up your registry as follows: http://windows.microsoft.com/en-US/windows-vista/Back-up-the-registry.

    Here are the steps to fix it.

    1. click on start, run, typeregedit in the Open box, and then click OK.

    2. look for the following registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell dossiers\

    3 remove the entries that show the path that is listed in the error message.

    886549 KBhttp://support.microsoft.com/default.aspx/kb/886549: Regedit open again. In the left pane, click User Shell Folders, point tonew, click expandable string value, type the value name that you want to restore (AppData) and then press ENTER. Right click on this value, clickchange, type the value in the value data for the value name box, and then clickOK. The value data must be: % USERPROFILE%\AppData\Roaming.

    Step 8 KB 886549 suggests that you also check the values in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders. However, by fixing my problem, I had not to change values in the registry key. If this does not work, follow ALL the steps in the referenced article.

    Good luck. Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • Computer shows as connected... but we can not access the internet.

    Original title: but alas... internet no.

    Recently, we had this problem where our shows as connected pc... but we can not access the internet.  What I've been able to solve, is that somehow my IP settings change.

    I'm going to "Obtain an IP address automatically" and "Obtain DNS server address automatically", but of course... when the problem occurs again I find that my "Obtain DNS server automatically an address" has been changed to "use the following DNS server address".

    What is causing my computer to change my settings?

    I think you're DIY too.  Normally, your computer and your wireless router assign dynamic IP addresses, and they change periodically - that is part of the security design.

    In your case, the DNS server is the router.

    Most of the time what you describe is your computer is able to find a wireless router but the router doesn't send an IP (its normal function).

    This is usually:

    1. Your Internet service provider is down or your connection to it is broken.  If this is the case there is nothing you can do about it.
    2. Your computer network security key does not match the one in the router.

    1 reset the modem & router.  Follow these instructions precisely: http://canadiantech.info/?page_id=136

    2. If that does not resolve the problem, you must remove this network from your list of networks to manage Windows 7.  Then try to connect again using the network key, you know.

    3. If this does not work, you will need to do a factory reset on the router and re - install the router according to the router set up instructions.

    4. If after all the above does not correct the problem, you must replace your router.

Maybe you are looking for