NetBios over VPN with a ROUTER normal not ASA?

Similar Questions

• NetBios Over VPN

  Hi all

  I have configured the site to site vpn b\w ASA 5510 ASA 5505.Its works fine, I can able to ping on the host of both sides.

  But I have the following problem

  1.I can access the shared folder of the peer host using its IP address.but I can't able to access it with the name of the computer for ex: \\akl13

  I think that maybe that's the problem with the NetBios/WINS by VPN service

  My question is how can I enable NETBIOS via VPN (site to site)

  I enclose the configuration

  ASA Version 7.0 (8)

  !

  ciscoasa hostname

  domain default.domain.invalid

  activate 2KFQnbNIdI.2KYOU encrypted password

  2KFQnbNIdI.2KYOU encrypted passwd

  names of

  DNS-guard

  !

  interface Ethernet0/0

  nameif outside

  security-level 0

  192.168.2.6 IP address 255.255.255.0

  !

  interface Ethernet0/1

  nameif inside

  security-level 100

  IP 172.16.1.1 255.255.255.0

  !

  interface Ethernet0/2

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface Ethernet0/3

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface Management0/0

  nameif management

  security-level 100

  IP 192.168.1.1 255.255.255.0

  management only

  !

  passive FTP mode

  access extensive list ip 172.16.1.0 inside_pnat_outbound allow 255.255.255.0 192

  . 168.4.0 255.255.255.0

  outside_cryptomap_20 to access extended list ip 192.168.3.0 allow 255.255.255.0 19

  2.168.4.0 255.255.255.0

  pager lines 24

  asdm of logging of information

  management of MTU 1500

  Outside 1500 MTU

  Within 1500 MTU

  no failover

  ASDM image disk0: / asdm - 508.bin

  don't allow no asdm history

  ARP timeout 14400

  public static 192.168.3.0 (inside, outside) - inside_pnat_outbound access list

  Route outside 0.0.0.0 0.0.0.0 192.168.2.6 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00

  Timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  dileep STkzljfDxlzWJX9D encrypted privilege 15 password username

  Enable http server

  http 192.168.1.0 255.255.255.0 management

  No snmp server location

  No snmp Server contact

  Server enable SNMP traps snmp authentication linkup, linkdown cold start

  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

  life crypto ipsec security association seconds 28800

  Crypto ipsec kilobytes of life - safety 4608000 association

  card crypto outside_map 20 match address outside_cryptomap_20

  peer set card crypto outside_map 20 192.168.2.7

  outside_map crypto 20 card value transform-set ESP-3DES-SHA

  life safety association set card crypto outside_map 20 28800 seconds

  card crypto outside_map 20 set security-association life kilobytes 4608000

  outside_map interface card crypto outside

  ISAKMP allows outside

  part of pre authentication ISAKMP policy 10

  ISAKMP policy 10 3des encryption

  ISAKMP policy 10 sha hash

  10 2 ISAKMP policy group

  ISAKMP life duration strategy 10 86400

  tunnel-group 192.168.2.7 type ipsec-l2l

  IPSec-attributes tunnel-group 192.168.2.7

  pre-shared-key *.

  Telnet timeout 5

  SSH timeout 5

  Console timeout 0

  management of 192.168.1.2 - dhcpd address 192.168.1.254

  dhcpd lease 3600

  dhcpd ping_timeout 50

  enable dhcpd management

  !

  class-map inspection_default

  match default-inspection-traffic

  !

  !

  Policy-map global_policy

  class inspection_default

  inspect the dns-length maximum 512

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the rsh

  inspect the rtsp

  inspect esmtp

  inspect sqlnet

  inspect the skinny

  inspect sunrpc

  inspect xdmcp

  inspect the sip

  inspect the netbios

  inspect the tftp

  !

  global service-policy global_policy

  Waiting for your valuable response

  In order to achieve a workstation through WINS name resolution, there must be a WINS server shared on two workgroups networks if you want. NetBIOS over TCP is a feature that is enabled in the settings of real network on the PC and not on the firewall.

• Fine continuous with G Router but not with N

  I recently bought a N-Router Linksys E2000 to replace my current G-Router Linksys WRT54GL in hopes of having the best connection for my Boxee Box wireless. I discovered that my Boxee Box have some problem (every 10 to 20 seconds) of buffering when streaming files .mkv 720 p or 1080 p Wireless with my E2000. I decided to put my good old... surprise and WRT54GL! No buffering... even with my mkv 1080 p... files! I also give it a try to transfer a TV show in 720 p (mkv) by wireless in the HARD drive connected on the Boxee... I have an average speed of 1.70 MB/s with the WRT54GL and not still 400 KB/s with the E2000... What's the problem with him?

  The latest authentic firmware both have 2 routers. The E2000 is set to mixed mode, auto channel and WPA2-Personal (AES). The WRT54GL is set to G only, Channel 6 and WPA2-Personal (AES). Is there something I need to check on my E2000 wireless settings?

  Thank you!

  Change the channel on E2000 to 6 or 11. Save the settings.

  Also try to change some advanced on the router settings wireless. Click on the Wireless tab and go wireless advanced settings. Change the tag to 75 interval, RTS threshold to 2307 and 2306 fragmentation threshold. Save the settings.

  Go to the Configuration tab and change the size MTU to 1365. Save the settings and the cycle of power to the router. See if that helps you.

• Attempt to connect wi fi on my Dell computer, running windows XP? Have DSL but not Ethernet. Faced with problems. Checked with CISCO router but not help there. CANY anyone help

  I have a problem connecting to a Cisco E100 router to my computer. My count (office) does not have a wireless. I have DSL from. Cisco tells me to plug a router using Ethernet cable to connect. I don't have an Ethernet connection on my computer. At present I have USB connect the computer to the Westell modem.  Can anyone help? I hope this is enough information. Basically what I'm hoping to do is to install the WiFi so I can use a tablet now and maybe a laptop this last on.

  Thank you

  On the routers only house you can use USB connections are those provided by some ISPs.  An Ethernet connection between the router and the computer is far more preferred.

  Your router a Cisco E1000 or is it really E100 (I thought that Cisco makes a model with this designation not)?

  It is quite surprising that you don't have an Ethernet connection that is built into your computer.  What is the complete model number (or, preferably, the Number of Service Dell)?

  Open the Device Manager (start > run > devmgmt.msc > OK).  Expand the "Network card" category by clicking on the + next to him.  What devices are listed in this category.

  If you don't really have an Ethernet or an adapter wireless built into your computer, you can add one, using a PCI internal (if you have a desktop/Tower computer) or external (PC card for laptops) or USB to laptops or desktop/towers.

  Also, the normal configuration is to connect your DSL modem to the router and then the router to the computer.  If your Westell modem has an Ethernet connection, you must use your new router in a non-standard configuration.  Even if the Westell modem has an Ethernet port, you may need to do some reconfiguration for her as well.  What is the complete model of the Westell modem number?

• Site to site VPN, can ping router but not customers

  I set up a site to site between an ASA5505 (company) and a router of the 871w (remote control).  The tunnel is up, and I can ping anything on the remote network business network.  However, with the passage of the company remotely, I am only able to ping the router, but no clients are connected on it.  The IP address for the router is on the same subnet as the rest of the guests (192.168.1.0/24).  I looked at the logs on the ASA5505 and it seems to be the way the traffic fine, so the problem seems to sit on the 871.  To reinforce this, to actually start the tunnel linking the corporate network using a ping to one of these customers (even if the ping command:------)

  I'll be happy to provide any additional information necessary.  Thank you.

  Hey Marshall.

  Can you confirm for me that there is no firewall on clients that might be blocking pings? The problem description that you provided it seems that as long as the clients initiate the ping, it is successful, but the reverse is not true. This seems to indicate something about customers may be blocking traffic. Also since you say that you are able to ping the router with the ip address in the same subnet as the clients it further strengthens my conviction that the issue could be with the customers.

  Kind regards

  ATRI.

• Two extensions of the range RE7000 with EA9500 router works not so well...

  Everything works very well with a RE7000, but when I add a second RE7000 (needed for another part of my house with weak signal), the 5 GHz band is confusing. By "confusing", I mean that you can however connect WiFi, but for some reason Internet access are not available.

  If I remove the second RE7000, everything works fine. The 2 GHz band works very well with one or two RE7000 in use. It is only the 5 GHz band that merges with the two RE7000 in use.

  I found this article on activation of the 802 - 11r option, hoping he can solve the problem, but this option does not appear on my page of RE7000 configuration settings:

  http://www.Linksys.com/us/support-article?articleNum=200527

  Any ideas?

  Well, after a few days, it is all working well, from the RE7000 seems to have done the job. Thanks again!

• Linksys BEFSR41 connection with modem router getting not real internet ip

  Hello, can someone help with this problem. I connected to a modem router linksys BEFSR41 router. But when I watched the status in linksys BEFSR41 router, it gives only an IP from the modem router and no real internet ip address.

  can someone give me an answer.

  Thanks in advance.

  Don't string two routers. Fill the modem/router or don't use the BEF as a router, but only as a simple switch (or replace it with a standard ethernet switch).

• HELO now window is in safe mode, but I want the window to work with safe mode, normally not only what to do

  window did not open so I opened it in safe mode but I want t o window open as usual

  Hello

  1. Close all running programs and open the windows if you are back on the desktop.
  2. Click on the Start () button.
  3. In the search box of the Start Menu () type msconfig and press enter on your keyboard - follow UAC prompt.
  4. The System Configuration utility opens
  5. Make sure the Normal startup is selected
  6. then click on the STARTUP tab at the top
  7. Make sure that the startup is disabled
  8. Apply - OK - then follow restart guests

• VPN on 2800 router does not

  Hello

  I have configured the VPN access on a 2800 router, but it doesn't respond when I try to connect by using a client from cisco. I can access the router via SSH, so the router is working. Can someone tell me what I missed?

  Anthony

  Hi Anthony,.

  Go ahead and add this line in your config file and try again:

  AAA authorization groupauthor LAN

  I would like to know how it works.

• How to configure the network home wiFi with dlink router

  I need to create a home network using the dlink WiFi router
  a computer with Vista and the second with XP
  can someone tell me what havo to do to configure the router etc etc o give me same informamation on where I can learn to do
  I want just the old pc with xp for the server and the vista one customer but more importantly I need the file on XP to migrate under vista.
  Thank you very muche for your end of the patient cooperation
  in return, I give free cooking classes
  see you soon

  I'm not sure if you are asking how to set up a secure wireless network, if you ask how to share files between your two computers (and there is no "customer" or "server" in a working group, in a field - which is not), or both.

  So I will give you information on doing both.

  Router - configure manually

  Setting up a router is simple enough. Normally, you run the CD that came with the router and follow the instructions. If you're running Vista, maybe the CD that came with the router does not work; I do not know this. But you can set up the router without the CD. Note that if you have Internet cable for the connection you have just set up the router to DHCP (or there may even be a choice of cable to choose). If you have DSL Internet, you select TRP usually and enter the username and password you selected when you initially set the DSL connection. So:

  1. turn off the power to your cable modem.
  2. attach a class (usually supplied with the router) ethernet cable cat5e port Internet/WAN from the router to the ethernet port on the cable modem.
  3. connect the ethernet cable cat5e from the network card in your computer to one of the ports on the router. If you do not have an ethernet cable (because you were using USB), you will need to go to the store and buy a.
  4. turn on the cable modem. After that all the lights are on, turn on the router.

  To configure the router:

  Have a computer connected to the router with an ethernet cable. Examples given are for a Linksys router. See the manual of your router or the router mftr's Web site. for the parameters by default if you don't have a Linksys. Open a browser such as Internet Explorer or Firefox and in the address bar type:

  http://192.168.1.1 [Enter] (it is default IP address of the router, which varies from router to router then check your manual)

  This will bring you to the login screen of the router. The default username is blank and the Linksys default password is "admin" without the quotes. Enter this information. You are now in the configuration of the router utility. Your configuration utility may be slightly different from mine. The first thing to do is to change the default password because * all * known default passwords for different routers.

  Click the Administration link at the top of the page. Enter your new password. MAKE A NOTE SOMEWHERE THAT YOU WILL NOT LOSE. Re-enter the password to confirm it, and then click Save settings at the bottom of the page. The router will reboot and show you the box of connection again. Do not fill in the user name and put it in your new password to enter the configuration utility.

  Now, click on the link wireless at the top of the page. Change the network name (SSID) wireless by default to something, you'll recognize. I suggest that my clients not use their surname as the SSID. For example, you might want to name your network wireless network "CastleAnthrax" or similar. ;-)

  Click on save settings and when you get the prompt that your changes were successful, click the wireless security link which is just beside the Basic Wireless Settings link (where you changed your SSID). Most computers purchased during the last 4 years have the wireless hardware that will support WPA2-Personal (also known as WPA2-PSK). This is the desired encryption level. If your wireless hardware is older, use WPA. Don't use WEP, because who is easily broken within minutes. So go ahead and set the Security Mode WPA2-Personal. Do this and enter a password. For example, you could use the password ' here be dragons, beware you scurvy dogs! The password is what you enter on all computers that are allowed to connect to the wireless network. MAKE A NOTE SOMEWHERE THAT YOU WILL NOT LOSE.

  At this point, your router is set up and if the computer that you use to configure the router will normally connect wireless, disconnect the ethernet cable and wireless of the computer should see your new network. Enter the password that you have created (exactly as you wrote it with all capital letters and punctuation) to join the network and start surfing.

  Networking

  Here are the steps of general network troubleshooting. Just cannot apply to your situation, so just take the bits that are. It may seem daunting, but if you follow the steps in the links and suggestions below calmly and consistently, you will have no difficulty to implement your sharing.

  Excellent, comprehensive, but easy to understand article on sharing files/printer under Vista. Contains information about sharing printers and files, and the folders:

  http://TechNet.Microsoft.com/en-us/library/bb727037.aspx

  For XP, start by running the Network Setup Wizard the on all machines (see warning in section A below).

  Problems sharing files between computers on a network are usually caused by 1) a misconfigured firewall or a firewall neglected (including a dynamic firewall in a virtual private network); or (2) inadvertently run two firewalls such as the firewall of Windows and a third-party firewall. and/or (3) do not have accounts to the same users and passwords on all computers in the workgroup. (4) tries to create actions where the operating system does not.

  A. configure the firewall on all machines to allow traffic to local area network (LAN) as being approved. With the Windows Firewall, it means which allows file sharing / print on the Exceptions tab normally run the XP Network Setup Wizard will take care of this for these machines. The only "witch hunt", it will turn on the XPSP2 Windows Firewall. If you are not running a third-party firewall or you have an antivirus/security with its own firewall component program, then you're fine.  With a third-party firewall, I usually set up the allocation of LAN with an IP address range. E.g. would be 192.168.1.0 - 192.168.1.254. Obviously you would substitute your correct subnet. Refer to the safety of any third party program or the user forums for how to correctly configure its firewall. Do not run more than one firewall. DON'T STOP FIREWALLS; CONFIGURE THEM CORRECTLY.

  (B) to facilitate the Organization, put all computers in the same workgroup. This is done from the System applet in Control Panel, the computer name tab.

  C. create the counterpart of the user accounts and passwords on all machines. You do not need to be logged into the same account on all machines and assigned to each user account passwords can be different; accounts/passwords just need to exist and to match on all machines. DO NOT NEGLECT TO CREATE PASSWORDS, EVEN IF ONLY OF SIMPLE. If you want a machine to boot directly to the desktop (a particular user account) for convenience, you can do this:

  XP - configure Windows to login automatically (MVP Ramesh) - http://windowsxp.mvps.org/Autologon.htm

  Vista - Start ORB > Search > type: netplwiz [Enter]
  Click continue (or provide an administrator password) when you are prompted by UAC

  Uncheck "users must enter a user name and password to use this computer". Select a user account to connect automatically by clicking on the account you want to highlight and press OK. Enter the password for this user account (when it exists) when you are prompted. Leave blank if there is no password (null).

  D. Si one or more of the computers is XP Pro or Media Center, turn off Simple file sharing (Folder Options > view tab).

  E. create share as you wish. XP Home does not share the users directory or the Program Files, but you can share folders inside those directories. A better choice is to simply use the Shared Documents folder. See the first link above for more information on Vista sharing.

  F. you have the job of file sharing (and tested by exchanging a file between machines), if you want to share a printer connected locally to one of your computers, share of this machine. Then go to the printer mftr Web site. and download the latest drivers for the correct system. Install them on the target machines. The printer must be collected during the installation procedure. If this isn't the case, install the drivers and then use the Add Printer Wizard. In some cases, printers must be installed as local printers, but it is outside this response.
  MS - MVP - Elephant Boy computers - don't panic!

• SIP over VPN tunnel

  We have VPN tunnel in our firewall with the other partner peer. We use ASA 5520 with IOS "asa825-k8" and ASDM version 6.4.

  our partner has several services running in this tunnel VPN, including the SIP.

  other services work very well only SIP connections cannot come.

  the question is we allowed any IP service on the inside and outside interfaces, but this topic could not come to the top.

  is - there any SIP over VPN option must be configured on ASA?

  Hello

  As you can see in the newspapers, it is denied to the inside interface.

  If you just need to allow this by opening an ACL for this traffic on port 5060.

  I would like to know if it works.

  Kind regards

  Aditya

  Please evaluate the useful messages and mark the correct answers.

• Two RV016, gateway to gateway, routing over VPN

  Hello

  I have two RV016, I have a vpn connection from gateway to gateway between the two and I can ping computers on both sides, but I can't reach the third lan (10.0.0.0/255.0.0.0). I can join this network to routerA but not of routerB.

  My Network typology:

  

  Configuration of routers (see attachments)

  How can I configure static routes on router B?

  I tried to do, but it does not work (see RouterB_routing.jpg)

  Can someone help me?

  Thank you.

  Krzysztof,

  
  

  Unfortunately the rv016 you cannot make static through the vpn tunnel routes as it isn't an ipsec interface in the static routes section of the router.  This is normal, the router will recognize that the default setting of lan in the vpn tunnel.

  
  

  You need to business routers to make the static routes through the ipsec tunnel.

• Is site to site VPN with sufficiently secure router?

  Hello

  I have a question about the site to site VPN with router.

  Internet <> router <> LAN

  If I have a VPN site-to-site configured on the router above with another site. I configured to block incoming Internet connections with the exception of VPN to access list. What are the risks of the LAN is exposed to threats from the Internet? Recommend that you put in a firewall between the router and the LAN, or replace the router with a firewall?

  Thank you

  Hi Amanda,.

  Assuming your L2L looks like this:

  LAN - router - INTERNET - Router_Remote - LAN

  |-------------------------------------------------------------------------------|

  L2L

  Traffic between the two local area networks is protected by the VPN tunnel. It is recommended to use the recommended security (strong encryption settings) to ensure that the encrypted traffic would not be compromised through the Internet.

  On the other hand, if you talk about outbound plaintext to the Internet, as when a user acceses google.com, then you just make out traffic, but never allow all incoming connections.

  If you want to protect your network with advanced security as a FW features, you can consider ZBF, which is the available in IOS Firewall/set function:

  Design of the area Guide of Application and firewall policies

  If you consider that this is not enough, check the ASA5500 series.

  HTH.

  Portu.

  Please note all useful posts

• 2911 w/security - VPN with DHCP Relay to Win2K8, routing fail

  Hello

  I have a 2911 router and tries to terminate a VPN inside.

  I want to do this is before the DHCP request to a Server 2008 inside.

  I actually received this part to work.  But it seems to be, 2911 router is not set the VPN clients on a VLAN internal associated with the range of network, the DHCP server is to give.  Or all least, does not have a flow of information between the IP address of the VPN Client and the router itself.

  (washed config below)

  Example: VPN Client obtains the IP address of 10.101.55.10.  The router has a loop (or subinterface in my last iteration of the config) address of 10.101.55.1.

  And yet, when my VPN client connects, I am not able to ping to an IP that my router has.  I can ping myself (10.101.55.10), but I only ping the router in any way which.

  Does anyone have any ideas?

  -----

  Paste config

  -----

  !
  ! Last configuration change at 04:48:18 UTC Friday 25 March 2011 by x
  !
  version 15.0
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  encryption password service
  !
  host name x
  !
  boot-start-marker
  boot-end-marker
  !
  logging buffered 51200 warnings
  enable secret 5 x
  !
  AAA new-model
  !
  !
  AAA authentication login default local radius group
  AAA authentication login userauthen local
  AAA authorization groupauthor LAN
  !
  !
  !
  !
  !
  AAA - the id of the joint session
  !
  !
  !
  !
  No ipv6 cef
  IP source-route
  IP cef
  !
  !
  !
  !
  property intellectual name x
  !
  Authenticated MultiLink bundle-name Panel
  !
  !
  !
  Crypto pki trustpoint TP-self-signed-3088527431
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 3088527431
  revocation checking no
  rsakeypair TP-self-signed-3088527431
  !
  !
  TP-self-signed-3088527431 crypto pki certificate chain
  certificate self-signed 01
  3082024B 308201B 4 A0030201 02020101 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 31312F30
  69666963 33303838 35323734 6174652D 3331301E 31393532 OF 30323236 170 3131
  31375A 17 0D 323030 31303130 30303030 305A 3031 06035504 03132649 312F302D
  4F532D53 5369676E 656C662D 43 65727469 66696361 74652 33 30383835 65642D
  32373433 3130819F 300 D 0609 2A 864886 01050003, 818, 0030, 81890281 F70D0101
  8100BB8B DCF74C9C 5068AF8B 17458225 C2C3702C 416CE391 6EA8991B D3CFFA1A
  62FCA661 566A30C5 2ADE1CBF 558335F9 E9811663 819FA2E9 BEEC77CD 768A 5829
  437E90FA 17F50DDE 94B52B67 96E1E8FC E4E7A12C 07E67582 342774 5 DF956CC8
  FAB6BA34 AB2D79B0 771D8D88 40FDDC34 9F5A0145 4A18B252 037DCDE1 8A114B84
  010001A 3 73307130 1 130101 FF040530 030101FF 301E0603 0F060355 0F190203
  551 1104 17301582 1341434 C 50475231 74657374 2E636F6D 301F0603 2E61636C
  551 2304 18301680 14929613 69D7A350 EA595EC1 C1520246 C00CAB37 A2301D06
  04160414 92961369 D7A350EA 595EC1C1 520246C 03551D0E 0 0CAB37A2 300 D 0609
  2A 864886 04050003 81810077 CBE5CA04 9D75B036 CF639BEC EFD03A3C F70D0101
  FB1390E6 5DC1DBF9 7311123D 9A 018140 2509EADC 9F03747E 3D12F993 BB69D424
  AEA4E0A6 75AF5209 4BD15BE0 92BDA0F1 C74245AF C41DB154 E443F8AD 3605EBE3
  F293D601 10 C 07520 FCB38B3E 6AC9AE74 AE9CB2A2 A80CED34 1FE185CF 24B1A689
  A9E1CF15 F3041A8E CE12C914 C53EEA
  quit smoking
  udi pid CISCO2911/K9 sn x license
  !
  !
  VTP version 2
  user name x
  !
  redundancy
  !
  !
  property intellectual ssh time 60
  property intellectual ssh version 2
  !
  !
  crypto ISAKMP policy 3
  BA 3des
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 5
  preshared authentication
  Group 2
  ISAKMP crypto key address 0.0.0.0 dmvpnkey 0.0.0.0
  ISAKMP crypto nat keepalive 20
  !
  the group x crypto isakmp client configuration
  x key
  DNS 10.0.0.6 10.0.0.3
  area x
  10.3.0.3 DHCP server
  GIADDR DHCP 10.101.55.1
  netmask 255.255.255.0
  !
  !
  Crypto ipsec transform-set esp-3des esp-sha-hmac VPNSET
  Crypto ipsec transform-set esp-3des esp-sha-hmac dmvpnset
  !
  Crypto ipsec profile dmvpnprof
  Set transform-set dmvpnset
  !
  !
  dynamic-map crypto vpn-dynmap 10
  game of transformation-VPNSET
  !
  !
  customer vpnclientmap of authentication crypto map list vpnusers
  card crypto isakmp authorization list groupauthor vpnclientmap
  client configuration address card crypto vpnclientmap answer
  vpnclientmap 10 card crypto-isakmp ipsec vpn Dynamics-dynmap
  !
  !
  !
  !
  !

  !
  !
  interface GigabitEthernet0/0
  Telus MPLS description
  IP 10.101.2.1 255.255.255.252
  IP virtual-reassembly
  Shutdown
  automatic duplex
  automatic speed
  !
  !
  interface GigabitEthernet0/1
  AllNorth hand VPN description
  DHCP IP address
  NAT outside IP
  IP virtual-reassembly
  automatic duplex
  automatic speed
  vpnclientmap card crypto
  !
  !
  interface GigabitEthernet0/2
  Description main trunk to LAN internal
  no ip address
  automatic duplex
  automatic speed
  !
  !
  interface GigabitEthernet0/2.4
  encapsulation dot1Q 4
  IP 10.101.4.1 255.255.255.0
  IP helper 10.3.0.3
  IP nat inside
  IP virtual-reassembly
  !
  interface GigabitEthernet0/2.10
  encapsulation dot1Q 10
  IP 10.101.10.1 255.255.255.0
  !
  interface GigabitEthernet0/2.50
  encapsulation dot1Q 50
  IP 10.101.50.1 255.255.255.0
  !
  interface GigabitEthernet0/2.55
  encapsulation dot1Q 55
  IP 10.101.55.1 255.255.255.0
  !
  interface GigabitEthernet0/2.99
  encapsulation dot1Q 99
  IP 10.101.99.1 255.255.255.0
  !
  interface FastEthernet0/0/0
  switchport access vlan 4
  !
  !
  interface FastEthernet0/0/1
  !
  !
  interface FastEthernet0/0/2
  switchport access vlan 10
  !
  !
  interface FastEthernet0/0/3
  switchport mode trunk
  !
  !
  interface Vlan1
  no ip address
  !
  !
  !
  Router eigrp 1
  Network 10.250.1.2 0.0.0.0
  !
  router ospf 100
  Log-adjacency-changes
  0.0.0.0 network 10.101.2.2 area 0
  !
  VPN IP local pool 10.151.56.1 10.151.56.20
  IP forward-Protocol ND
  !
  no ip address of the http server
  no ip http secure server
  !
  IP nat inside source nat route map - this interface GigabitEthernet0/1 overload
  IP route 10.3.0.0 255.255.255.0 10.101.4.2
  !
  allowed to access-list 23 x
  access-list 23 allow 10.0.0.0 0.255.255.255
  access-list 100 permit udp any host x eq isakmp
  access-list 100 permit esp any host x
  access-list 100 permit gre any x host
  access-list 100 permit tcp any host x eq telnet
  access-list 104. allow ip 10.101.4.0 0.0.0.255 any
  access-list 104. allow ip 10.101.55.0 0.0.0.255 any
  access-list 130 allow ip 10.0.0.0 0.255.255.255 10.101.55.0 0.0.0.255
  !
  !
  !
  !
  nat permit - this route map 10
  corresponds to the IP 104
  !
  !
  x SNMP-server community
  !
  control plan
  !
  !
  !
  Line con 0
  line to 0
  line vty 0 4
  access-class 23 in
  Synchronous recording
  transport input telnet ssh
  line vty 5 15
  access-class 23 in
  transport input telnet ssh
  !
  Scheduler allocate 20000 1000
  end

  Yes, it looks like you might have as a subnet of more large covered in your routing protocols internal hence set up 'reverse-road '.

  Good to hear it works now. Kindly, please mark this post as responded while others can learn from this post. Thank you.

• VPN using hotspot with ios 10 does not

  I often work off site and use my iPhone AT & T s 6 to attach my work Windows 10 Pro (processor ASUS T300CHI) Tablet.  Although many places I work have Wifi, most only allow VPN I need to connect to my work server.  After updating ios 10 (I'm on 10.0.1), I did have problems engaging, but VPN doesn't work anymore.

  VPN integrated Windows 10 Pro on my Tablet has an automatic configuration that appears to detect the type of configuration (IKEv2/IPSec/PPTP/L2TP, etc.) and you just put in user name and password.  According to my dept IT, the VPN connection in the office not only supports PPTP (I understand has been disabled with ios 10) but also supports IKEv2 and L2TP/IPSec.  Nevertheless, I always left configuration VPN on Windows 10 in auto.  I tried selecting the connection type, but it did not work either.  Generally I get the error "failure of VPN tunnels.

  Any thoughts would be appreciated

  MattyBH,

  Please keep us informed if you were able to solve this problem.  I also have the same problem since the update iOS10.  I think it has to do with Apple, removing the IOS10 PPTP protocol... I was able to confirm the conclusion of downgrading to previous IOS 9.3 and my VPN works very well, unfortunately my users with iPHONE7 cannot sink their IOS and now can not access VPN through hotspots iOS10