WRT1900AC: Cannot access the router remotely

Similar Questions

• Cannot access the Console remotely

  Hey guys, I'm new to VM Ware and has difficulties to access the console remotely, even if I can access the Web Access page very well...

  The error I get is:

  Unable to connect to the MKS: unable to connect to the host domain.com: no connection could be made because the target machine actively refused

  When you search for an answer to this, I found a post that said to ensure that the /etc/pam.d/vmware-authd has been configured correctly, as well as the/etc/vmware/config...

  None of these files/folders are there.

  That said, my host OS is (unfortunately) of Windows Vista, with VM Ware running on top of that, and now I am trying to get Fedora Core 11 to present itself as the virtual machine.

  Any ideas you can give would be much appreciated.

  Sorry, I did not myself clear - its port 902 on the host that you need to check that you can telnet to because the VMware console connections are made using the host (so that they can still operate even when there is no network in the comments, for example at installation time), not to the guest directly (for client firewalls are not the parameters used either for the console). I guess that 8333 is fine, otherwise you wouldn't be able to connect remotely to the web console.

  Guy Leech

  VMware vExpert 2009

  ---

  If you have found this device or any other answer useful please consider the use of buttons useful or Correct to award points.

• Windows 10 devices cannot access the router settings (R6250) page

  So, after several hours of troubleshooting (reset the router, firmware flashing, try several devices) I think I discovered why I get the message '192.168.1.1 refused to connect': 10 Windows. All devices not - 10 Windows can connect to Settings page fine, but all of my Windows 10 devices fail and get this message. And on my laptop, it gets the message refused on Windows 10, but when I rebooted the router and tried a linux live usb on the laptop, it connected to the page of the parameters very well. So I think it's some kind of problem between Windows 10 and the router.

  Anyone has any advice on how to fix this? I need the settings page to run on Windows 10 as it is the main operating system I use.

  Thank you!

  Have you tried different browsers?

  Try turning off the Windows Firewall, temporarily.

• Cannot access the Router #2

  Here is a diagram of my home network.  This is what works.  If I have a device (phone or laptop) connected to the #2 router (wired or wireless), I can browse my network devices and browse the Internet without any problems.  My problem happens the other way.  For example, if I have a device (phone or laptop) connected to the #1 router (wired or wireless) I can see all network devices, with the exception of #2 router and all devices connected to it.

  Starting from a device connected to the Router 1 # I can ping LAN ports and Internet #1, #1 wireless bridge and Bridge #2 wireless router.  However, I can not ping the Internet port on the Router #2.  I guess it's a setting on Router #2 just don't have yet.   Here is a list of my equipment:

  Wireless routers are the two Linksys WRT 54 G

  Wireless bridges are the two Engenius ENS202

  Any ideas on why this is happening?

  

  Turn your router n ° 2 in a switch\repeater.

  Changes required for the installation of WRT610n:

  1. Change the SSID of the evocative wireless for the location. Ex: UpstairsWifi
  2. This must be done at the same time on the configuration screen, change the IP address of the router to 192.168.1.254 for you there is an IP address conflict with your main router, disable DHCP and save the settings
  3. Don't forget after that point that the internet port of the router is not to be used only the LAN ports
  4. If you need to reconfigure this router you would use it's new IP address in the browser "192.168.1.254".

  This means that your network IP addresses range starts with ' 192.168.1.. " If not the typical another range of IP addresses would begin by "192.168.0. * ' in which case the router's IP address must be changed to 192.168.0.254

• Cannot access my router through the Explorer configuration page

  I need to do a port forwarding on my router. My internet connection works (even if she falls occasionally) and I can also connect to other computers on my network. However, I cannot access my router through IE page (I get a message saying: page not found). When I go see the map in the options Vista network, the router is not displayed and when I clikc on "See the whole map", I get a message saying that Windows cannot detect any computer or devices.

  My connection to the router is connected, and it is a WRT54G Lyinksys. Any ideas how I can see my router or go to its page layout? Another thing, I went to CMD and the ping command returns a default gateway 192.168.1.1, which is what I have my using the address of the webb page.

  Thanks for any help.

  Hi JBHPUser,
  
  (a) other router configuration page, you are able to access other Web sites?
   
  (b) what operating system and Internet Explorer version do you use?
   
  This article can be very useful.
   
  You receive an error message in Internet Explorer: "Internet Explorer cannot display the webpage".
  http://support.Microsoft.com/kb/956196
   
  You can also access these links, which is primarily for Windows Vista, but are also applies to Windows 7
   
  
  Solve problems with computers not appearing is not in the network map
  http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-problems-with-computers-not-appearing-on-the-network-map
   
  Network connection problems
  http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-network-connection-problems
   
   
  
  Aziz Nadeem - Microsoft Support

• Failed: Cannot access the remote Converter Standalone Agent service. It does not exist or is not responding.

  When I try to run the converter that we receive the following error message, FAILED: cannot access the remote Converter Standalone Agent service. It does not exist or is not responding.

  RaymondT

  Given that the conversion works, you can have a software or configuration of Windows Server. Check the Windows event logs. Anything in current policies that could prevent?

• Cannot access the BEFSX41 router Config page Win 7

  Hi, I have a BEFSX41and am not able to access my router from any browser config page I have on my system. I use IE and FireFox and when I punch in the IP address for the router there is just there and about 30 seconds later, says that there is a mistake and that the connection has been reset. It is a 64-bit installation and I also have another computer that goes through the same router, is 32-bit and doesn't have this problem.

  I added a NEW driver for my Realtek NIC and it still happens. Another machine that I have on my network ALSO has a Realtek NIC but can still access the router config page.

  Someone at - it else here has the same problem?

  OK, problem solved. I used a different IP and the problem disappeared, thanks for the help.

• Desktop HP cannot access the wireless router

  HP Phoenix
  Product name: h9 - 1195d

  It seems that he be blocked by the software of HP support.

  I am connected via wireless but just can't access the router.

  While a netbook of borrowing can access the router wireless without problem.

  can someone help...

  Great, thanks for posting!

  Let us know if you have other problems.

• internal hosts cannot access the internet w / L2L configured tunnel

  The internal hosts behind the ASA cannot access the internet with a configured tunnel to L2L. The L2L tunnel is mounted and passing traffic correctly. However, the internal host cannot access the internet through the ASA. I think I have my NAT watered somewhere. I can't even a host statically mapped to the internet. It might be because I'm used to having a WAN IP to the external interface which differs by the CIDR block assigned by the ISP. In this case, it's all together, with the ASA outside interface occupying the first available address.

  We have been assigned a CIDR range x.x.x.64/28. x.x.x.65 is my front door and my first usable est.68, by the PSI (I guess what they utilisent.66 et.67 for internal use). External interface of the ASA est.68 and I'm trying to get NAT others. I'm Polo all DHCP clients internal and have some static entries as well. Below is the relevant NAT config. Yet once, all traffic passes above the tunnel properly, but not from inside to outside. If more information is needed, please advise.

  interface outside

  IP address x.x.x.68 255.255.255.240

  NAT-control

  Global x.x.x.69 - x.x.x.77 2 (outdoor)

  Global 1 x.x.x.78 (outside)

  NAT (inside) 0 access-list sheep

  NAT (inside) 1 10.10.10.0 255.255.255.0

  public static x.x.x.69 (inside, outside) STATIC_NAT_EXAMPLE netmask 255.255.255.255

  internal access-group interface inside

  Route outside 0.0.0.0 0.0.0.0 x.x.x.65 1

  internal to the 10.10.10.0 ip access list allow 255.255.255.0 any

  ! Remote LAN is 192.168.10.0/24

  access-list sheep extended ip 10.10.10.0 allow 255.255.255.0 192.168.10.0 255.255.255.0

  Can you post a "show sysopt run?

  Try this command to enable proxy arp.

  No outside sysopt noproxyarp

• HP 15 laptop: laptop computer is connected to the wi - fi connection, but cannot access the internet

  Hello

  My problem is my WiFi says its connected but I can't browse or access the internet.it just tells me "unable to connect to internet computer is not connected to the internet", but my wifi says 'connected'.i tried to go to the cmd prompt and typed in "netsh int ip reset resetlog.txt c:\" goal it shows me "reset failed.access is denied .he don't s no user specified settings to be reset to zero." please "» What can I do?

  Thanks in advance.

  Hello @jerome256,

  Welcome to the HP Forums, I hope you enjoy your experience! To help you get the most out of the HP Forums, I would like to draw your attention to the HP Forums Guide first time here? Learn how to publish and more.

  I understand that you are having a problem with your WiFi and wanted to help you!

  You are trying to access WiFi through router?  If you are connected to your wireless network, but cannot access the internet, then the problem may be with the router.  Check that the router is connected to the internet.  If you have more than one router, then you can ensure that you are connected to the correct router.  You can also try unplugging the router for about 30 seconds, and then reconnecting it.  Please consult the following document, as it can help solve the problem for you:

  HP PC - Troubleshooting wireless network and Internet (Windows 10)

  Please let me know if this information has been helpful by clicking the thumbs up below.

  Have a great day!

• Cannot access the internet on a network Windows XP when Windows 7 goes to sleep

  Original title: Windows 7 Windows XP network problem.

  I replaced a Windows XP computer on my node 4 (2 PC, printer 2) cable network with a Windows 7 computer.  When the Windows 7 computer in mode 'sleep' the other (XP) computer cannot access the internet.  A message appears that there are 2 computers with the same IP address.  If I wake the computer 7 fine.  That is what it is?  I agree not all files between the computers.

  Hello

  It is usually the case when, for example, a router is off, but one or more of the devices connected to the router are left on.

  The devices to retain the ip address assigned to them, but when the router starts up again it has no knowledge of this. If when you start one of the other devices, the router can assign an ip address already in use. Concrete example that I reproduced with my router and the PC...

  • Start the router, then boot PC1 and PC2 - the router (192.168.1.1) will allocate for PC1 192.168.1.2 and 192.168.1.3 to PC2
  • Turn off the router, then turn off PC2, restart and shut off again
  • Put the PC1 to sleep
  • Start the router and PC2, the router does not PC1 and allocate 192.168.1.2 to PC2
  • PC1 to wake up and there still 192.168.1.2 who now is a confrontation with PC2

  Other ways to reproduce this situation may also be possible.

  All devices on your network must have a unique ip address, where the warning message.

  If you get this situation once again, the solution is to turn off all devices, including the router, then restart the router, then restart all devices connected to the router.

  To avoid this, you may be able to put ip Reservations for your router address which will ensure that all devices connected to the router always get the same ip address (unique). If you are unsure how to proceed, we will need your router brand and model to help.

  Tricky

• PC can see and access the laptop without asking for a user name and password but the laptop cannot access the PC because it asks me a username and password that I don't know.

  Vista - Windows 7 network connection. username and password is unknown.

  Hello

  I just got a laptop with windows 7 on it and I want to connect to my other PC for it, they are on the same network through a router. the PC can see and access the laptop without asking for a user name and password but the laptop cannot access the PC because it asks me a username and password that I don't know.

  If someone could answer this question, it would be great.

  Hello
  Maybe this can help.

  Win7 when configured on the peer-to-peer network has three types of configurations of sharing.

  Group residential network = only works between Win 7 computers. This type of configuration, it is very easy to entry level users to start sharing network.

  Working network = fundamentally similar to previous methods of sharing that allow you to control what, how and to whom the records would be shared with.
  
  Public share = network Public (as Internet Café) in order to reduce security risks.

  For the best newspaper of the results of each computer screen system and together all computers on a network of the same name, while each computer has its own unique name.

  http://www.ezlan.NET/Win7/net_name.jpg

  Make sure that the software firewall on each computer allows free local traffic. If you use 3rd party Firewall on, Vista/XP Firewall Native should be disabled, and the active firewall has adjusted to your network numbers IP on what is sometimes called the Zone of confidence (see part 3 firewall instructions

  General example, http://www.ezlan.net/faq.html#trusted
  Please note that some 3rd party software firewall continue to block the same aspects it traffic Local, they are turned Off (disabled). If possible, configure the firewall correctly or completely uninstall to allow a clean flow of local network traffic. If the 3rd party software is uninstalled, or disables, make sure Windows native firewall is active .

  ------------------------------

  If your network consists only of Win 7 and you want a simple network, use it.

  http://Windows.Microsoft.com/en-us/Windows7/help/videos/sharing-files-with-HomeGroup

  After you have configured the homegroup, scroll to the bottom for the Permission/security section.

  -----------------------------

  Win 7 networking with other version of Windows as a work network.

  In the center of the network, by clicking on the type of network opens the window to the right.

  Choose your network type. Note the check box at the bottom and check/uncheck depending on your needs.

  http://www.ezlan.NET/Win7/net_type.jpg

  Win 7 - http://windows.microsoft.com/en-us/windows7/Networking-home-computers-running-different-versions-of-Windows

  Win 7 network sharing folder specific work - http://www.onecomputerguy.com/windows7/windows7_sharing.htm

  Vista file and printer sharing - http://technet.microsoft.com/en-us/library/bb727037.aspx

  Windows XP file sharing - http://support.microsoft.com/default.aspx?scid=kb;en-us;304040
  Sharing printer XP - http://www.microsoft.com/windowsxp/using/networking/expert/honeycutt_july2.mspx

  Setting Windows native firewall for sharing XP - http://support.microsoft.com/kb/875357
  Windows XP Patch for sharing with Vista (no need for XP - SP3) - http://support.microsoft.com/kb/922120

  When you have finished the configuration of the system, it is recommended to restart everything the router and all computers involved.

  -------------

  If you have authorization and security problems, check the following settings.

  Point to a folder that wants to share do right click and choose Properties.

  In the properties

  Click on the Security tab shown in the bellows of the photo on the right) and verify that users and their permissions (see photo below Centre and left) are configured correctly. Then do the same for the authorization tab.

  This screen shot is to Win 7, Vista menus are similar.

  http://www.ezlan.NET/Win7/permission-security.jpg

  The Security Panel and the authorization Panel, you need to highlight each user/group and consider that the authorization controls are verified correctly.

  When everything is OK, restart the network (router and computer).

  * Note . The groups and users listed in the screen-shoot are just an example. Your list will focus on how your system is configured.

  * Note . There must be specific users. All means all users who already have an account now as users. This does not mean everyone who feel they would like to connect.

  ---------------------

  *** Note. Some of the processes described above are made sake not for Windows, but to compensate for different routers and how their firmware works and stores information about computers that are networked.

  Jack-MVP Windows Networking. WWW.EZLAN.NET

• Cannot access the WRT320N cascading to the IP 192.168.1.2

  I have two routers WRT320N running.  The first is 192.168.1.1 IP and DHCP turned on and connected to the cable modem.  The second WRT320N is IP 192.168.1.2, disabled DHCP, NAT disabled.  The second router is connected to the first by using one of the ports labeled 1thorugh 4; the WAN port on the second router is not used.  Both routers are configured for wireless with an appropriate warranty, etc.  I put Remore management 'on' and put at the disposal of all property intellectual.  Now, I realize that remote management can be provided for use of the internet (not my intended use) rather than on the same home network.

  Good new first: the works of all things.  Devices wired for both routers have internet access and can 'see' each other for sharing of files, etc.  In addition, devices wireless on both networks seem to work OK, and the first router [192.168.1.1] shows all devices as clients, no matter what router they are physically or wireless connected to.

  Now the bad news: although it has worked reliably for days, I now can't access the second router [192.168.1.2] from anywhere in the network (no matter what router, the computer is connected to).  Work of its customers and you can test it with success of any computer, but when I type http://192.168.1.2 on IE or Firefox from any computer, it times out.  No dialog box asking for the password; not nothing.  All times out.  I tried the cyclical power router, but that has no effect.  Once again, during the first days, it seemed to work.  I could type http://192.168.1.2 of any client in the network and access the Router 2 very well and see its settings, set its SSID, etc etc.  Still, the router seems to work as I would and my network performance is OK, even for clients on the second router wireless, but I can not only access the URL.

  I'm sure I can hit 'reset' and that it will probably heal, but it also means that I have to start from scratch on a long list of the customizations I made to its settings, including. SSID, security, IP address, NAT configuration, etc. etc. (I save a configuration after I put in place.)  Is the only option to reset and then re - load the saved configuration? )

  Any thoughts here?  It is always tempting to blame firmware, especially when it works OK for a while, and then it stopped working.  Of course, I could also do sometihng evil.  Any help appreciated.  Thank you.

  to: Helm

  Thank you very much.

  It turns out that I had to do the factory reset, and then I have download the old config file until I'm your answer

  so far, all is well... the device seems to move traffic as it should, and I can access it again by entering the URL http://192.168.1.2

  I'll see how long the 'fix' hard... I really think they have a bug in the firmware there somewhere

  If she out craps again, I will set up from scratch, as you suggest.

  Thanks a lot for your help

  I think I'm 'good' for now.

• VPN IS CONNECTED BUT CANNOT ACCESS THE INTERNAL NETWORK

  I tried to set up a simple customer vpn using this document

  http://www.Cisco.com/en/us/products/sw/secursw/ps2308/products_configuration_example09186a00801e71c0.shtml

  VPN IS CONNECTED BUT CANNOT ACCESS THE INTERNAL NETWORK BEHIND "RA"...

  6.3 (5) PIX version

  interface ethernet0 car

  Auto interface ethernet1

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  activate the encrypted password of VmHKIhnF4Gs5AWk3

  VmHKIhnF4Gs5AWk3 encrypted passwd

  hostname VOIPLABPIX

  domain voicelab.com

  fixup protocol dns-length maximum 512

  fixup protocol ftp 21

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol http 80

  fixup protocol they 389

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol sip 5060

  fixup protocol sip udp 5060

  fixup protocol 2000 skinny

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol tftp 69

  names of

  access-list 101 permit ip 172.10.2.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 101 permit ip 172.10.1.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 102 permit ip 172.10.2.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 102 permit ip 172.10.1.0 255.255.255.0 172.10.3.0 255.255.255.0

  pager lines 24

  Outside 1500 MTU

  Within 1500 MTU

  IP address outside 208.x.x.11 255.255.255.0

  IP address inside 172.10.2.2 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  IP local pool voicelabpool 172.10.3.100 - 172.10.3.254

  history of PDM activate

  ARP timeout 14400

  NAT (inside) - 0 102 access list

  Route outside 0.0.0.0 0.0.0.0 208.x.x.11 1

  Route inside 172.10.1.0 255.255.255.0 172.10.2.1 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  AAA-server GANYMEDE + 3 max-failed-attempts

  AAA-server GANYMEDE + deadtime 10

  RADIUS Protocol RADIUS AAA server

  AAA-server RADIUS 3 max-failed-attempts

  AAA-RADIUS deadtime 10 Server

  AAA-server local LOCAL Protocol

  Enable http server

  http 172.0.0.0 255.0.0.0 inside

  http 0.0.0.0 0.0.0.0 inside

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Permitted connection ipsec sysopt

  Crypto ipsec transform-set esp-aes-256 trmset1, esp-sha-hmac

  Crypto-map dynamic map2 10 set transform-set trmset1

  map map1 10 ipsec-isakmp crypto dynamic map2

  client authentication card crypto LOCAL map1

  map1 outside crypto map interface

  ISAKMP allows outside

  ISAKMP identity address

  part of pre authentication ISAKMP policy 10

  ISAKMP policy 10 encryption aes-256

  ISAKMP policy 10 sha hash

  10 2 ISAKMP policy group

  ISAKMP life duration strategy 10 86400

  vpngroup address voicelabpool pool cuclab

  vpngroup dns 204.x.x.10 Server cuclab

  vpngroup cuclab by default-field voicelab.com

  vpngroup split tunnel 101 cuclab

  vpngroup idle 1800 cuclab-time

  vpngroup password cuclab *.

  Telnet timeout 5

  SSH 208.x.x.11 255.255.255.255 outside

  SSH 0.0.0.0 0.0.0.0 outdoors

  SSH 172.10.1.2 255.255.255.255 inside

  SSH timeout 60

  Console timeout 0

  username labadmin jNEF0yoDIDCsaoVQ encrypted password privilege 2

  Terminal width 80

  Cryptochecksum:b03a349e1ac9e6022432523bbb54504b

  : end

  Try to turn on NAT - T

  PIX (config) #isakmp nat-traversal 20

  http://www.Cisco.com/en/us/products/ps6120/products_tech_note09186a00807e0aca.shtml#Solution1

  HTH

• CANNOT ACCESS THE LAN WITH THE EASY VPN CONFIGURATION

  Hello

  I configured easy vpn server in cisco 1905 SRI using ccp. The router is already configured with zone based firewall. With the help of vpn client I can reach only up to the internal interface of the router, but cannot access the LAN from my company. I need to change any configuration of ZBF since it is configured as "deny everything" from outside to inside? If so that all protocols should I match?   Also is there any exemption of NAT for VPN clients? Please help me! Thanks in advance.

  Please see my full configuration:

  Router #sh run
  Building configuration...

  Current configuration: 8150 bytes
  !
  ! Last modification of the configuration at 05:40:32 UTC Wednesday, July 4, 2012 by
  ! NVRAM config updated 06:04 UTC Tuesday, July 3, 2012 by
  ! NVRAM config updated 06:04 UTC Tuesday, July 3, 2012 by
  version 15.1
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  router host name
  !
  boot-start-marker
  boot-end-marker
  !
  !
  Passwords security min-length 6
  no set record in buffered memory
  enable secret 5 xxxxxxxxxxx
  !
  AAA new-model
  !
  !
  AAA authentication login default local
  AAA authentication login ciscocp_vpn_xauth_ml_1 local
  AAA authorization exec default local
  AAA authorization ciscocp_vpn_group_ml_1 LAN
  !
  !
  !
  !
  !
  AAA - the id of the joint session
  !
  !
  No ipv6 cef
  IP source-route
  no ip free-arps
  IP cef
  !
  Xxxxxxxxx name server IP
  IP server name yyyyyyyyy
  !
  Authenticated MultiLink bundle-name Panel
  !

  parameter-map local urlfpolicy TSQ-URL-FILTER type
  offshore alert
  block-page message "Blocked according to policy"
  parameter-card type urlf-glob FACEBOOK
  model facebook.com
  model *. Facebook.com

  parameter-card type urlf-glob YOUTUBE
  mires of youtube.com
  model *. YouTube.com

  parameter-card type urlf-glob CRICKET
  model espncricinfo.com
  model *. espncricinfo.com

  parameter-card type urlf-glob CRICKET1
  webcric.com model
  model *. webcric.com

  parameter-card type urlf-glob YAHOO
  model *. Yahoo.com
  model yapo

  parameter-card type urlf-glob PERMITTEDSITES
  model *.

  parameter-card type urlf-glob HOTMAIL
  model hotmail.com
  model *. Hotmail.com

  Crypto pki token removal timeout default 0
  !
  Crypto pki trustpoint TP-self-signed-2049533683
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 2049533683
  revocation checking no
  rsakeypair TP-self-signed-2049533683
  !
  Crypto pki trustpoint tti
  crl revocation checking
  !
  Crypto pki trustpoint test_trustpoint_config_created_for_sdm
  name of the object [email protected] / * /
  crl revocation checking
  !
  !
  TP-self-signed-4966226213 crypto pki certificate chain
  certificate self-signed 01
  3082022B 30820194 02111101 300 D 0609 2A 864886 F70D0101 05050030 A0030201
  2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43647274 31312F30
  69666963 32303439 35323236 6174652D 3833301E 170 3132 30363232 30363332

  quit smoking
  encryption pki certificate chain tti
  for the crypto pki certificate chain test_trustpoint_config_created_for_sdm
  license udi pid CISCO1905/K9 sn xxxxxx
  licence start-up module c1900 technology-package datak9
  username privilege 15 password 0 xxxxx xxxxxxx
  !
  redundancy
  !
  !
  !
  !
  !
  type of class-card inspect entire tsq-inspection-traffic game
  dns protocol game
  ftp protocol game
  https protocol game
  match icmp Protocol
  match the imap Protocol
  pop3 Protocol game
  netshow Protocol game
  Protocol shell game
  match Protocol realmedia
  match rtsp Protocol
  smtp Protocol game
  sql-net Protocol game
  streamworks Protocol game
  tftp Protocol game
  vdolive Protocol game
  tcp protocol match
  udp Protocol game
  match Protocol l2tp
  class-card type match - all BLOCKEDSITES urlfilter
  Server-domain urlf-glob FACEBOOK game
  Server-domain urlf-glob YOUTUBE game
  CRICKET urlf-glob-domain of the server match
  game server-domain urlf-glob CRICKET1
  game server-domain urlf-glob HOTMAIL
  class-map type urlfilter match - all PERMITTEDSITES
  Server-domain urlf-glob PERMITTEDSITES match
  inspect the class-map match tsq-insp-traffic type
  corresponds to the class-map tsq-inspection-traffic
  type of class-card inspect correspondence tsq-http
  http protocol game
  type of class-card inspect all match tsq-icmp
  match icmp Protocol
  tcp protocol match
  udp Protocol game
  type of class-card inspect correspondence tsq-invalid-src
  game group-access 100
  type of class-card inspect correspondence tsq-icmp-access
  corresponds to the class-map tsq-icmp
  !
  !
  type of policy-card inspect urlfilter TSQBLOCKEDSITES
  class type urlfilter BLOCKEDSITES
  Journal
  reset
  class type urlfilter PERMITTEDSITES
  allow
  Journal
  type of policy-card inspect SELF - AUX-OUT-policy
  class type inspect tsq-icmp-access
  inspect
  class class by default
  Pass
  policy-card type check IN and OUT - POLICIES
  class type inspect tsq-invalid-src
  Drop newspaper
  class type inspect tsq-http
  inspect
  service-policy urlfilter TSQBLOCKEDSITES
  class type inspect tsq-insp-traffic
  inspect
  class class by default
  drop
  policy-card type check OUT IN-POLICY
  class class by default
  drop
  !
  area inside security
  security of the OUTSIDE area
  source of security OUT-OF-IN zone-pair outside the destination inside
  type of service-strategy check OUT IN-POLICY
  zone-pair IN-to-OUT DOMESTIC destination outside source security
  type of service-strategy inspect IN and OUT - POLICIES
  security of the FREE-to-OUT source destination free outdoors pair box
  type of service-strategy inspect SELF - AUX-OUT-policy
  !
  Crypto ctcp port 10000
  !
  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 2
  Group 2
  !
  ISAKMP crypto client configuration group vpntunnel
  XXXXXXX key
  pool SDM_POOL_1
  include-local-lan
  10 Max-users
  ISAKMP crypto ciscocp-ike-profile-1 profile
  vpntunnel group identity match
  client authentication list ciscocp_vpn_xauth_ml_1
  ISAKMP authorization list ciscocp_vpn_group_ml_1
  client configuration address respond
  virtual-model 1
  !
  !
  Crypto ipsec transform-set TSQ-TRANSFORMATION des-esp esp-md5-hmac
  !
  Profile of crypto ipsec CiscoCP_Profile1
  game of transformation-TRANSFORMATION TSQ
  set of isakmp - profile ciscocp-ike-profile-1
  !
  !
  !
  !
  !
  !
  the Embedded-Service-Engine0/0 interface
  no ip address
  response to IP mask
  IP directed broadcast to the
  Shutdown
  !
  interface GigabitEthernet0/0
  Description LAN INTERFACE-FW-INSIDE
  IP 172.17.0.71 255.255.0.0
  IP nat inside
  IP virtual-reassembly in
  security of the inside members area
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/1
  Description WAN-INTERNET-INTERNET-FW-OUTSIDE
  IP address xxxxxx yyyyyyy
  NAT outside IP
  IP virtual-reassembly in
  security of the OUTSIDE member area
  automatic duplex
  automatic speed
  !
  interface Serial0/0/0
  no ip address
  response to IP mask
  IP directed broadcast to the
  Shutdown
  no fair queue
  2000000 clock frequency
  !
  type of interface virtual-Template1 tunnel
  IP unnumbered GigabitEthernet0/0
  ipv4 ipsec tunnel mode
  Tunnel CiscoCP_Profile1 ipsec protection profile
  !
  local IP SDM_POOL_1 172.17.0.11 pool 172.17.0.20
  IP forward-Protocol ND
  !
  no ip address of the http server
  local IP http authentication
  IP http secure server
  !
  IP nat inside source list 1 interface GigabitEthernet0/1 overload
  IP route 0.0.0.0 0.0.0.0 yyyyyyyyy
  IP route 192.168.1.0 255.255.255.0 172.17.0.6
  IP route 192.168.4.0 255.255.255.0 172.17.0.6
  !
  access-list 1 permit 172.17.0.0 0.0.255.255
  access-list 100 permit ip 255.255.255.255 host everything
  access-list 100 permit ip 127.0.0.0 0.255.255.255 everything
  access-list 100 permit ip yyyyyy yyyyyy everything
  !
  !
  !
  !
  !
  !
  !
  !
  control plan
  !
  !
  !
  Line con 0
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport of entry all
  output transport lat pad rlogin lapb - your MOP v120 udptn ssh telnet
  StopBits 1
  line vty 0 4
  transport input ssh rlogin
  !
  Scheduler allocate 20000 1000
  end

  A few things to change:

  (1) pool of IP must be a single subnet, it is not the same subnet as your subnet internal.

  (2) your NAT ACL 1 must be changed to ACL extended for you can configure NAT exemption, so if your pool is reconfigured to be 10.10.10.0/24:

  access-list 120 deny ip 172.17.0.0 0.0.255.255 10.10.10.0 0.0.0.255

  access-list 120 allow ip 172.17.0.0 0.0.255.255 everything

  overload of IP nat inside source list 120 interface GigabitEthernet0/1

  No inside source list 1 interface GigabitEthernet0/1 ip nat overload

  (3) OUT POLICY need to include VPN traffic:

  access-list 121 allow ip 10.10.10.0 0.0.0.255 172.17.0.0 0.0.255.255

  type of class-card inspect correspondence vpn-access

  game group-access 121

  policy-card type check OUT IN-POLICY

  vpn-access class

  inspect