L2l configuration with internet access

Similar Questions

• Need help with internet access on a Linksys E1200 strategy

  Hi, I have an a Linksys E1200 (Firmware Version: 2.0.01), and September 13, 2012, I configured the Internet access policy to deny access to internet for 4 devices between the hours of 22:00 and 08:00 on the evening of the school.)  It was working fine! I was very pleased.

  Over the last weekend, the electricity was launched for a second, the power was back on in 2-3 seconds if. The router comes back online, and everything seemed in excellent working condition. Then Sunday evening (considered to be a night of school in our House) at 22:00 the router did not refuse Internet 4 devices as it normally did. I logged into the control panel admin via a browser web, and checked access to internet strategies, I configured last week was still configuration property.

  Everything was always configuration property to deny access to the internet for 4 devices Sunday night/Monday morning between 08:00 and 22:00. I checked that the router has the date and time. But the router is not always deny access as it was setup to do. It worked fine before the weekend, and then after the weekend it stopped working the property. The only thing I can think of this month of may of the cause is 2-3 seconds, the power went out then came back on. The router is connected through a surge protection.

  Then I set up the Internt access policy week last to deny access to 4 devices on the night of the school between 22:00 and 08:00. I waited 24 hours to make sure it worked, after that it worked, I got the router send me a backup of the config file. I tried to use it to solve this problem, but it did not help either.

  This is a screenshot of what looks like my Internet access policy. I had to create 2 policies because the router has refused to create a policy where the end time was not later than the start time. Anywho, so political #1 is from 22:00 to 11:55, and policy #2 is from 12: 00 to 08:00. This Internet access policy is configured to deny access to 4 devices between midnight and 08:00 Monday morning. It was working fine last week, so I'm 100% positive that it is the router.

  

  The following screenshot is the status information to show the date and time of the router is correct.

  

  So the router was Monday morning @ 03:00, the router has an active policy of internet access to deny the device access to the internet, the router had recently worked flawlessly to do this, but for some reason any, that he could not do this morning?

  Can you please explain it to me or provide me with free software to "lock" the internet for specified devices. I really want to have to stay until 22:00 5 nights a week, so I can help my daughter sneaking online when she should be in bed. taking his phone and the laptop is not an option.

  Thanks for reading, forward a reply as soon as possible.

  ~ Tony

  Hello. I think that Yes, too, that it is a router problem. Just to isolate it, try to update the firmware and then reset and reconfigure the router again and use the same policies that have worked before. On Cisco's Web site, the latest firmware for version 2 is 2.0.04. You can download it here http://homesupport.cisco.com/en-us/support/routers/E1200. You can use the links below in the public KB site of Cisco.

  Manually upgrading firmware of the Linksys wireless-N Router

  http://www6.nohold.NET/Cisco2/UKP.aspx?VW=1&docid=0a6881b90224439b92c8d8f19ca42e5d_21511.XML&PID=80&...

  Setting up a Linksys router for DSL Internet connection

  http://www6.nohold.NET/Cisco2/UKP.aspx?pid=80&VW=1&articleid=3687

  Setting up a Linksys router with cable Internet service

  http://www6.nohold.NET/Cisco2/UKP.aspx?pid=80&VW=1&articleid=3686

• Private network with Internet access

  Hello

  Using WS 9. Building a 'private' isolated network who always has Internet access for testing purposes? I built a virtual machine that has AD, DNS and DHCP installed. Ask yourself if it's feasible to isolate this virtual machine from the corporate LAN, but allow it to have access to the Internet to d/load patches/security fixes?

  I created "the" private network as follows (VMnet2):

  

  Thank you

  BRITISH COLUMBIA

  Host-only, it's just that and does not communicate beyond the host.  You could add a connected by a bridge or a NAT Network Adapter to the Virtual Machine and connect it to your updates and unplug when done.

• Cannot access internet when you configure with internet connection sharing.

  INTERNET HELP?

  I tried to use the internet connection to my wireless on my PC laptop not wireless using an Ethernet cable. I have connected my pc not wireless to my laptop wireless pc with ethernet cable, I did everything as requested on the site of "Dummies" and the PC says its connected but when I try to go on Internet Explorer, it does not work? HELP! : (PS) my PC is Windows Vista and my laptop Windows 7

  Hello

  1. While sharing was the Internet works fine before?
  2 did you change on your computers before this problem?

  I suggest you follow these methods and check.

  Method 1: You can follow the Windows Help article below and check that ICS is set up correctly.
  Set up a shared Internet connection using ICS (Internet Connection Sharing)
  http://Windows.Microsoft.com/en-us/Windows7/set-up-a-shared-Internet-connection-using-ICS-Internet-connection-sharing
  If ICS is not configured correctly, then you must post back the result by running the following command
  To do this:
  a. click the Start button.
  b. type cmd in the search box.
  (c) in the command prompt, you must type ' ipconfig/all' and check the result.

  Take a screenshot of the command prompt and post.
  To take a screenshot, you can follow this link below.
  Use capture tool to capture screenshots
  http://Windows.Microsoft.com/en-us/Windows-Vista/use-Snipping-Tool-to-capture-screen-shots

  Method 2:  Windows wireless and wired network connection problems
  http://Windows.Microsoft.com/en-us/Windows/help/wired-and-wireless-network-connection-problems-in-Windows?T1=Tab03

  I hope this helps.

  Thank you.

• Virtual MACHINE on Windows 7 with internet access

  Hello world

  I have an iso of Debian Linux to create a virtual machine at this address: http://ftp.nl.debian.org/debian/dists/squeeze/main/installer-i386/current/images/netboot/

  This image needs to download packages from the internet, but I don't know why I can't have access to the web. I'm in a corporate network with a proxy, but I already tried together the proxy during installation and it still does not work.

  I'm using VMWare workstation 6.5, and I wonder if this is a missing configuration on the VMware or Windows 7. I also tried to connect to internet other virtual machines to Linux that I've already created (an older Debian and Ubuntu), but none of them could not access the internet (even if the proxy server).

  Could you help me on this?

  Thanks in advance,

  Have you tried to bridge?  I seem to have better luck with this setting.

• Problem with Internet access: local only for wireless in Vista

  Help, please.  I have a Dell laptop and a Dell desktop computer.  The other day, I pressed WPS on my router Netgear wireless, and since then, my desktop computer (Windows Vista Home Premium SP2) was not able to connect to the Internet.  The office is connected to my router.  My Dell (Win 7 Pro) laptop is able to connect wirelessly to the router and Internet.

  That's what I tried:
  (1) I bought a new wireless router Netgear WNDR4500
  (2) I bought a cutting mini USB wifi adapter for the desktop.  Install the driver.
  (3) reset winsock, ipv4, ipv6, dns
  -netsh int ip reset reset.log
  -netsh winsock reset catalog

  ipconfig/flushdns

  (4) order McAfee firewall
  (5) restarted several times
  (6) persons with disabilities wired and wireless enabled - I get signal green/fort
  (7) off active and wired wireless
  None of the above seem to work.  I keep getting 'Access to local only' on both cables and wireless.  When I ping yahoo.com, I get no response.
  My laptop, however, works very well in the connection to the wireless router and also to the Internet.
  Anything else I can try?  Help, please!
  KT

  Hello

  Thanks for sharing the information valid.

  In case, if you need help, you can always post your questions as well as your valuable suggestions in this forum.

• Problems with internet access, troubleshooting, Windows 7 does not work.

  Hello, I have recently started up to Windows 7 on a partition of Windows 10, because a game wasn't working properly on Windows 10 system (has notified downgrade after a one hour session troubleshooting).

  I don't know if the game is causing these issues or anything else, but my internet connection goes away, even if the internet bar shows that it has internet.

  Right now, I'm typing this, it says I have a problem.

  

  Also, I have troubleshooted a lot of times, with the answer is:

  

  This happens at random, or whenever I join a game for Minecraft.

  Does anyone know the solution to this problem?

  Other images:

  

  Hello

  You can see the answer given by Arya S Asok by mentioning the problem with adapter or wireless access point

  Let us know how it goes.

  Kind regards

• Problem with internet access point

  Hello, I saw that this question was asked before, but has never seen a solution to my problem, I will explain:

  I have like 5 months with this problem. I have a TP-LINK 300Mbps Wireless N Router, model No. TL-WR841ND. The fact is that when I plug in my router to the Modem, my wireless network seems to work fine, but when I try to connect to my computer or any other device to the network (mobile phones, playstation 3, tablets, etc.), I am unable to do so. On my laptop, I get the message: 'Problem with wireless adapter or access point', but the most confusing thing is that sometimes I can connect to the Internet via my network wireless without any problem.

  This time I decided to post my problem, because I'm tired of it. Sometimes it happens, sometimes it doesn't. Right now, I have two days without Internet connection (Via router), because my modem works properly.

  PS: I have another router (Linksys) and I can connect to this network, but I want to solve my problem with the TP-Link because the signal is stronger. Help!

  See links.

  How to install a TP-LINK wireless routers (Recommended)?

  http://www.TP-link.com/LK/article/?faqid=92

  Why can I not access the Internet after connecting the TP-LINK router to my modem.

  http://www.TP-link.com/LK/article/?faqid=138

  TP-Link FAQ.

  http://www.TP-link.com/LK/support/FAQ/?keywords=TL-WR841ND

• L2L configuration with the same intellectual property regime

  Hi all

  hoefully it won't be easy. I set up some VPN site to site, but now I have one that has a plan of the same IP as me. 192.168.9.x is the subnet in question. I think I'll need to NAT, the jobs of 192.168.9.x who will have access to my network. I usually add a rule exempt from NAT for my other L2L sites, but since I'm on NAT for this one I can not add, correct? Also, I think that when I add a route statement to my router I point to the NAT address... Thanks in advance for any help.

  Please visit the following OCC configuration guides...

  http://www.Cisco.com/en/us/partner/products/ps5855/products_configuration_example09186a0080a0ece4.shtml

  http://www.Cisco.com/en/us/partner/products/ps6120/products_configuration_example09186a0080b37d0b.shtml

• Vista host with internet access attached usb must be shared with the machine connected by ethernet xp

  Help I have something overlooking simple went through all the stages of preparation for machines as well as differences in networking. He had twice right, but when the internet connection is broken (my blackberry), something is not right on reconnect.

  Are you asking how to enable Internet connection sharing on the host of Vista?  If so:

  1. Go to Control Panel > network and sharing Center .
  2. Click manage network connections .
  3. Right click on the USB connection.
  4. Click on Properties .
  5. Click sharing .
  6. Put a checkmark in the Internet connection sharing box.

  Boulder computer Maven
  Most Microsoft Valuable Professional

• Cannot get my Satellite Pro to work with internet access wireless

  I have a Satellite Pro L20 - who has wireless network adapter. Bought a BT Voyager 2110 Wireless ADSL router. Connected to my broadband router. Used Toshiba config to find router on my laptop - it looks like I have then drag the icon of the laptop to the router but it says I can't do because the router is used by another owner?
  Should I do anyting - Inter adapter card in my laptop says activated - the router is connected - but nothing works.
  Please help but I'm pretty useless on these things so keep it clear
  Thank you

  Hello

  Is this the result even when you use the settings Windows wireless?

• When will Windows 7 be compatible with Internet access? When I go through access of __web it says "not supported on this operating system" __I just bought 2 new P 7 computers that cannot access the other computers on my network. __

  See above

  ·                                 This is the Forum for Windows Update .

  For questions of Windows 7, here is a link to a list of the Windows 7 Forums:

  http://social.answers.Microsoft.com/forums/en-us/w7network/threads

  Windows 7 Networking Forum at the link above.

  http://social.answers.Microsoft.com/forums/en-us/category/Windows7

  Link above is Windows 7 forum for questions on windows 7.

  All Windows 7 issues (other than Windows 7 update issues) should be directed to the it.

  See you soon.

  Mick Murphy - Microsoft partner

• Activate Adobe on a will not connect to the computer with internet access

  How to activate Adobe on a standalone computer?

  This is the forum Adobe Reader that doesn't require activation. If you let us know what you are trying to activate, we can send you in the right direction.

• Equium A100 - 027 PSAAQ - having problems with WiFi Internet access

  Just installed Windows XP Home edition on my Equium A100-027 (PSAAQ) Vista didn't like. Now I'm having problems with Internet access. Should what drivers I download and how to install?

  Thank you.

  Hello

  I suggest you to check the site toshiba driver
  -> http://eu.computers.toshiba-europe.com/cgi-bin/ToshibaCSG/download_drivers_bios.jsp

  You can search your machine and download the wlan drivers. If you don t know that you you just all download and install ´em, one of the drivers SHOULD work. ;)

  Welcome them

• Windows - Internet access, no split Tunnel L2TP VPN Clients does not

  Greetings!

  I have four ASA 5505 that I configured with 4 site to site VPN tunnels (works perfectly) to connect to our company facilities 4. The ASA is also configured with remote access L2TP/IPsec so that a specific group of users of portable computers can connect to and access to all facilities. It also works very well except for one important exception - my split tunnel setting doesn't seem to work, because I can't connect to the Internet outside the VPN resources.

  I accept the inherent risk of allowing tunnels to split from a security point of view since I take the necessary steps to secure the systems used for remote access. I would appreciate any feedback on how to get the job of split tunnel.

  Here is the configuration:

  : Saved
  :
  ASA Version 1.0000 11
  !
  SGC hostname
  domain somewhere.com
  names of
  COMMENTS COMMENTS LAN 192.168.2.0 name description
  name 75.185.129.13 description of SGC - external INTERNAL ASA
  name 172.22.0.0 description of SITE1-LAN Ohio management network
  description of SITE2-LAN name 172.23.0.0 Lake Club Network
  name 172.24.0.0 description of training3-LAN network Southwood
  description of training3 - ASA 123.234.8.124 ASA Southwoods name
  INTERNAL name 192.168.10.0 network Local INTERNAL description
  description of name 192.168.11.0 INTERNAL - VPN VPN INTERNAL Clients
  description of Apollo name 192.168.10.4 INTERNAL domain controller
  description of DHD name 192.168.10.2 Access Point #1
  description of GDO name 192.168.10.3 Access Point #2
  description of Odyssey name 192.168.10.5 INTERNAL Test Server
  CMS internal description INTERNAL ASA name 192.168.10.1
  name 123.234.8.60 description of SITE1 - ASA ASA management Ohio
  description of SITE2 - ASA 123.234.8.189 Lake Club ASA name
  description of training3-VOICE name Southwood Voice Network 10.1.0.0
  name 172.25.0.0 description of training3-WIFI wireless Southwood
  !
  interface Vlan1
  nameif outside
  security-level 0
  IP address dhcp setroute
  !
  interface Vlan2
  nameif INSIDE
  security-level 100
  255.255.255.0 SGC-internal IP address
  !
  interface Vlan3
  nameif COMMENTS
  security-level 50
  IP 192.168.2.1 255.255.255.0
  !
  interface Ethernet0/0
  Time Warner Cable description
  !
  interface Ethernet0/1
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/2
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/3
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/4
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/5
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/6
  Description for Wireless AP Trunk Port
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/7
  Description for Wireless AP Trunk Port
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  boot system Disk0: / asa821-11 - k8.bin
  Disk0: / config.txt boot configuration
  passive FTP mode
  clock timezone IS - 5
  clock to summer time EDT recurring
  DNS domain-lookup outside
  INTERNAL DNS domain-lookup
  DNS domain-lookup GUEST
  DNS server-group DefaultDNS
  Name-Server 4.2.2.2
  domain somewhere.com
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  DM_INLINE_TCP_1 tcp service object-group
  EQ port 3389 object
  port-object eq www
  EQ object of the https port
  EQ smtp port object
  the DM_INLINE_NETWORK_1 object-group network
  network-object SITE1-LAN 255.255.0.0
  network-object SITE2-LAN 255.255.0.0
  network-object training3-LAN 255.255.0.0
  object-group training3-GLOBAL network
  Southwood description Global Network
  network-object training3-LAN 255.255.0.0
  network-object training3-VOICE 255.255.0.0
  network-object training3-WIFI 255.255.0.0
  DM_INLINE_TCP_2 tcp service object-group
  EQ port 5900 object
  EQ object Port 5901
  object-group network INTERNAL GLOBAL
  Description Global INTERNAL Network
  network-object INTERNAL 255.255.255.0
  network-object INTERNALLY-VPN 255.255.255.0
  access-list outside_access note Pings allow
  outside_access list extended access permit icmp any CMS-external host
  access-list outside_access note that VNC for Camille
  outside_access list extended access permit tcp any host CMS-external object-group DM_INLINE_TCP_2
  access-list outside_access note INTERNAL Services
  outside_access list extended access permit tcp any host CMS-external object-group DM_INLINE_TCP_1
  DefaultRAGroup_splitTunnelAcl list standard access allowed INTERNAL 255.255.255.0
  access-list sheep extended ip INTERNAL 255.255.255.0 allow INTERNAL VPN 255.255.255.0
  access-list extended sheep allowed ip IN-HOUSE-GLOBAL SITE1-LAN 255.255.0.0 object-group
  access-list extended sheep allowed ip IN-HOUSE-GLOBAL SITE2-LAN 255.255.0.0 object-group
  access-list extended sheep allowed ip object-IN-HOUSE-GLOBAL object group training3-GLOBAL
  access-list INTERNAL-to-SITE1 extended permit ip IN-HOUSE-GLOBAL SITE1-LAN 255.255.0.0 object-group
  access-list INTERNAL-to-training3 extended permitted ip object-IN-HOUSE-GLOBAL object group training3-GLOBAL
  access-list INTERNAL-to-SITE2 extended permit ip IN-HOUSE-GLOBAL SITE2-LAN 255.255.0.0 object-group
  no pager
  Enable logging
  exploitation forest asdm warnings
  Debugging trace record
  Outside 1500 MTU
  MTU 1500 INTERNAL
  MTU 1500 COMMENTS
  192.168.11.1 mask - local 192.168.11.25 pool IN-HOUSE VPN IP 255.255.255.0
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  ASDM image disk0: / asdm - 623.bin
  enable ASDM history
  ARP timeout 14400
  Global 1 interface (outside)
  (INTERNAL) NAT 0 access-list sheep
  NAT (INTERNAL) 1 0.0.0.0 0.0.0.0
  NAT (GUEST) 1 0.0.0.0 0.0.0.0
  5900 5900 Camille netmask 255.255.255.255 interface static tcp (GUEST, outdoor)
  3389 3389 Apollo netmask 255.255.255.255 interface static tcp (INDOOR, outdoor)
  public static tcp (INDOOR, outdoor) interface www Apollo www netmask 255.255.255.255
  public static tcp (INDOOR, outdoor) interface https Apollo https netmask 255.255.255.255
  public static tcp (INDOOR, outdoor) interface smtp smtp Apollo netmask 255.255.255.255
  5901 puppy 5901 netmask 255.255.255.255 interface static tcp (GUEST, outdoor)
  Access-group outside_access in interface outside
  Timeout xlate 0:05:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  dynamic-access-policy-registration DfltAccessPolicy
  RADIUS protocol AAA-server Apollo
  Apollo (INTERNAL) AAA-server Apollo
  Timeout 5
  key *.
  AAA authentication enable LOCAL console
  the ssh LOCAL console AAA authentication
  AAA authentication LOCAL telnet console
  AAA authentication http LOCAL console
  Enable http server
  http 0.0.0.0 0.0.0.0 INTERNAL
  http 0.0.0.0 0.0.0.0 COMMENTS
  No snmp server location
  No snmp Server contact
  Community SNMP-server
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac
  Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac
  Crypto ipsec transform-set esp-3des esp-sha-hmac TRANS_ESP_3DES_SHA
  Crypto ipsec transform-set transit mode TRANS_ESP_3DES_SHA
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  life crypto ipsec security association seconds 28800
  Crypto ipsec kilobytes of life - safety 4608000 association
  SYSTEM_DEFAULT_CRYPTO_MAP game 65535 dynamic-map crypto transform-set ESP-3DES-SHA TRANS_ESP_3DES_SHA
  correspondence address 1 card crypto outside_map INTERNAL SITE1
  card crypto outside_map 1 set of peer SITE1 - ASA
  card crypto outside_map 1 set of transformation-ESP-3DES-SHA
  address for correspondence card crypto outside_map 2 INTERNAL training3
  outside_map 2 peer training3 - ASA crypto card game
  card crypto outside_map 2 game of transformation-ESP-3DES-SHA
  address for correspondence outside_map 3 card crypto INTERNAL SITE2
  game card crypto outside_map 3 peers SITE2 - ASA
  card crypto outside_map 3 game of transformation-ESP-3DES-SHA
  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  outside_map interface card crypto outside
  crypto ISAKMP allow outside
  crypto ISAKMP policy 10
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  delimiter group @.
  Telnet training3 - ASA 255.255.255.255 outside
  Telnet SITE2 - ASA 255.255.255.255 outside
  Telnet SITE1 - ASA 255.255.255.255 outside
  Telnet 0.0.0.0 0.0.0.0 INTERNAL
  Telnet 0.0.0.0 0.0.0.0 COMMENTS
  Telnet timeout 60
  SSH enable ibou
  SSH training3 - ASA 255.255.255.255 outside
  SSH SITE2 - ASA 255.255.255.255 outside
  SSH SITE1 - ASA 255.255.255.255 outside
  SSH 0.0.0.0 0.0.0.0 INTERNAL
  SSH 0.0.0.0 0.0.0.0 COMMENTS
  SSH timeout 60
  Console timeout 0
  access to the INTERNAL administration
  Hello to tunnel L2TP 100
  interface ID client DHCP-client to the outside
  dhcpd dns 4.2.2.1 4.2.2.2
  dhcpd ping_timeout 750
  dhcpd outside auto_config
  !
  address INTERNAL 192.168.10.100 dhcpd - 192.168.10.200
  dhcpd Apollo Odyssey interface INTERNAL dns
  dhcpd somewhere.com domain INTERNAL interface
  interface of dhcpd option 150 ip 10.1.1.40 INTERNAL
  enable dhcpd INTERNAL
  !
  dhcpd address 192.168.2.100 - 192.168.2.200 COMMENTS
  dhcpd dns 4.2.2.1 4.2.2.2 interface COMMENTS
  enable dhcpd COMMENTS
  !

  a basic threat threat detection
  statistical threat detection port
  Statistical threat detection Protocol
  Statistics-list of access threat detection
  a statistical threat detection tcp-interception rate-interval 30 burst-400-rate average rate 200
  NTP server 192.43.244.18 prefer external source
  WebVPN
  allow outside
  CSD image disk0:/securedesktop-asa-3.4.2048.pkg
  SVC disk0:/sslclient-win-1.1.4.179.pkg 1 image
  SVC disk0:/anyconnect-win-2.4.1012-k9.pkg 2 image
  enable SVC
  Group Policy DefaultRAGroup INTERNAL
  attributes of Group Policy DefaultRAGroup
  Server DNS 192.168.10.4 value
  Protocol-tunnel-VPN l2tp ipsec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list DefaultRAGroup_splitTunnelAcl
  value by default-domain somewhere.com
  Group Policy DefaultWEBVPNGroup INTERNAL
  attributes of Group Policy DefaultWEBVPNGroup
  VPN-tunnel-Protocol webvpn
  Group Policy DefaultL2LGroup INTERNAL
  attributes of Group Policy DefaultL2LGroup
  Protocol-tunnel-VPN IPSec l2tp ipsec
  Group Policy DefaultACVPNGroup INTERNAL
  attributes of Group Policy DefaultACVPNGroup
  VPN-tunnel-Protocol svc
  attributes of Group Policy DfltGrpPolicy
  value of 192.168.10.4 DNS Server 4.2.2.2
  VPN - 25 simultaneous connections
  VPN-idle-timeout no
  Protocol-tunnel-VPN IPSec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list DefaultRAGroup_splitTunnelAcl
  value by default-domain somewhere.com
  the value INTERNAL VPN address pools
  chip-removal-disconnect disable card
  WebVPN
  SVC keepalive no
  client of dpd-interval SVC no
  dpd-interval SVC bridge no
  value of customization DfltCustomization
  attributes global-tunnel-group DefaultRAGroup
  VPN INTERNAL address pool
  Group Policy - by default-DefaultRAGroup
  IPSec-attributes tunnel-group DefaultRAGroup
  pre-shared-key *.
  Disable ISAKMP keepalive
  tunnel-group DefaultRAGroup ppp-attributes
  No chap authentication
  no authentication ms-chap-v1
  ms-chap-v2 authentication
  attributes global-tunnel-group DefaultWEBVPNGroup
  VPN INTERNAL address pool
  Group Policy - by default-DefaultWEBVPNGroup
  tunnel-group 123.234.8.60 type ipsec-l2l
  IPSec-attributes tunnel-group 123.234.8.60
  pre-shared-key *.
  tunnel-group 123.234.8.124 type ipsec-l2l
  IPSec-attributes tunnel-group 123.234.8.124
  pre-shared-key *.
  tunnel-group 123.234.8.189 type ipsec-l2l
  IPSec-attributes tunnel-group 123.234.8.189
  pre-shared-key *.
  type tunnel-group DefaultACVPNGroup remote access
  attributes global-tunnel-group DefaultACVPNGroup
  VPN INTERNAL address pool
  Group Policy - by default-DefaultACVPNGroup
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  inspect the http
  inspect the they
  !
  global service-policy global_policy
  context of prompt hostname
  Cryptochecksum:423c807c0d63cb3e9aeceda977053f84
  : end
  ASDM image disk0: / asdm - 623.bin
  ASDM location Camille 255.255.255.255 INTERNAL
  ASDM location INTERNAL CGT-external 255.255.255.255
  ASDM location INTERNAL SITE1-LAN 255.255.0.0
  ASDM location INTERNAL SITE2-LAN 255.255.0.0
  ASDM location INTERNAL training3-LAN 255.255.0.0
  ASDM location INTERNAL training3 - ASA 255.255.255.255
  ASDM location INTERNAL GDO 255.255.255.255
  ASDM location INTERNAL SITE1 - ASA 255.255.255.255
  ASDM location INTERNAL SITE2 - ASA 255.255.255.255
  ASDM location INTERNAL training3-VOICE 255.255.0.0
  ASDM location puppy 255.255.255.255 INTERNAL
  enable ASDM history

  I should also mention that my test clients are a combination of Windows XP, Windows 7, and Windows Mobile. Other that in specifying the preshared key and forcing L2TP/IPsec on the client side, the VPN settings on clients are the default settings with the help of MS-CHAP/MS-CHAPv2.

  You must configure * intercept-dhcp enable * in your group strategy:

  attributes of Group Policy DefaultRAGroup

  attributes of Group Policy DefaultRAGroup

  Server DNS 192.168.10.4 value
  Protocol-tunnel-VPN l2tp ipsec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list DefaultRAGroup_splitTunnelAcl
  value by default-domain somewhere.com

  Intercept-dhcp enable

  -Latptop VPN clients (which I assume are on windows computers) is also the * use on remote network default gateway * box unchecked.  It is located on the Advanced tab of VPN client TCP/IP properties.   Select Client VPN > properties > Networking > TCP/IP Internet Protocol > properties > advanced and uncheck the box.

  Alex