Newsgroup: it.comp.reti.cisco
Titolo: VPN Microsoft quando connessa non navigo più su internet





salve a tutti


ho configurato sul mio router l'accesso  
tramite vpn microfot. L'unico problema è che quando accedo alla vpn dal client 
non riwesco piu' a navigare su internet


suggerimenti?


 


Current configuration : 4603 bytes
!
version 
12.4
service timestamps debug datetime msec
service timestamps log 
datetime msec
service password-encryption
!
hostname 
IRV-CentroStella
!
boot-start-marker
boot-end-marker
!
logging 
buffered 51200 warnings
enable secret 5 
$1$gkwK$zwwt1no99VqXi.jPBZhFq0
!
no aaa new-model
!
resource 
policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi 
pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
no ip dhcp 
use vrf connected
ip dhcp excluded-address 10.0.11.1 10.0.11.10
!
ip 
dhcp pool IRV-CentroStella
   import all
   network 
10.0.11.0 255.255.255.192
   dns-server 151.99.125.1 151.99.125.2 

   default-router 10.0.11.1 
   lease 
infinite
!
!
ip ips name IRV-IntrusionPreventionSystem
ip domain 
name 
irv.it
ip name-server 151.99.125.1
ip name-server 
151.99.125.2
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN 
group
 accept-dialin
  protocol pptp
  virtual-template 
1
!
!
!
!
crypto pki trustpoint 
TP-self-signed-2778651510
 enrollment selfsigned
 subject-name 
cn=IOS-Self-Signed-Certificate-2778651510
 revocation-check 
none
 rsakeypair TP-self-signed-2778651510
!
!
crypto pki 
certificate chain TP-self-signed-2778651510
 certificate self-signed 
01
  3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 
04050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 
6E65642D 43657274 
  69666963 6174652D 32373738 36353135 3130301E 
170D3036 30313139 30393533 
  32335A17 0D323030 31303130 30303030 
305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 
65642D43 65727469 66696361 74652D32 37373836 
  35313531 3030819F 
300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100BD7F 
E6AA142B 678AB302 A3E3032C 0A8ACB52 2A3A86BD 409AAF32 EE756058 
  
2387FD5B 0D58DD48 C0E53471 A1D7DD47 FE10057C D22E4E65 5A23F3F0 0B2306FD 

  1920157E 21BD2141 BCA95300 9303FC49 3805EBDD 4DD3EBA5 D40CFCC6 
1D80B3A5 
  589A425F 747C8599 5F9486E9 16984400 E8F85DB3 7DE092F1 
2AAC9C04 8DE89861 
  B6A10203 010001A3 77307530 0F060355 1D130101 
FF040530 030101FF 30220603 
  551D1104 1B301982 17495256 2D43656E 
74726F53 74656C6C 612E6972 762E6974 
  301F0603 551D2304 18301680 
14F6A5FE B569ACFE 5A0D41D8 5F24927A 096019D4 
  AC301D06 03551D0E 
04160414 F6A5FEB5 69ACFE5A 0D41D85F 24927A09 6019D4AC 
  300D0609 
2A864886 F70D0101 04050003 81810082 002D7777 42FB4D55 EAC9BD5A 
  
00B31390 6D474969 AC620532 7E299B96 CA6AFB7B 05DA8835 0AB240F5 E9D17488 

  0D7303CC 83CD6EF4 E82BD0AE 1052D791 8E162677 D27DEE76 13CEEFA4 
678D1C03 
  0953DA12 9A1D3FF4 050F23E1 DED4D04F CE361858 CAA72011 
36B4EEAD 4EF5EE13 
  E9ABA9FD C7E66931 8DF31365 DCA196EA 
722E57
  quit
username spooke privilege 15 secret 5 
$1$OKT/$puqJO4PArrIJzXCUShS0C1
username mario password 7 
03105E1812
username vpnirv password 7 044D1B0806335A
username raffaele 
privilege 15 secret 5 $1$LJ4L$tnE2Qrsjtm92edILTDwjw.
!
! 

!
!
!
interface Tunnel0
 description Tunnel Verso 
IRV-Rossano
 ip address 172.16.11.1 255.255.255.0
 tunnel source 
82.185.XXX.XX
 tunnel destination 82.189.XXX.XX
!
interface 
FastEthernet0/0
 description Zona-Trusted
 ip address 10.0.11.1 
255.255.255.192
 ip nat inside
 ip 
virtual-reassembly
 duplex auto
 speed auto
!
interface 
FastEthernet0/1
 no ip address
 shutdown
 duplex 
auto
 speed auto
!
interface ATM0/0/0
 no ip 
address
 no atm ilmi-keepalive
 dsl operating-mode auto 

!
interface ATM0/0/0.1 point-to-point
 description 
ConnessioneADSL
 ip address 82.185.XXX.XX 255.255.255.248 
secondary
 ip address 88.33.XXX.XX 255.255.255.252
 ip 
access-group 102 in
 ip ips IRV-IntrusionPreventionSystem in
 ip 
nat outside
 ip virtual-reassembly
 pvc 8/35 

 !
!
interface Virtual-Template1 
 ip unnumbered 
ATM0/0/0.1
 peer default ip address pool UserIP
 no 
keepalive
 ppp encrypt mppe auto
 ppp authentication pap chap 
ms-chap
!
ip local pool UserIP 172.16.1.1 172.16.1.250
ip 
classless
ip route 0.0.0.0 0.0.0.0 ATM0/0/0.1
ip route 10.0.15.0 
255.255.255.0 Tunnel0
ip route 10.0.15.0 255.255.255.192 
Tunnel0
!
!
ip http server
ip http authentication local
ip http 
secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip 
nat inside source list 1 interface ATM0/0/0.1 overload
!
access-list 1 
permit 10.0.0.0 0.0.0.255
access-list 1 permit 10.0.11.0 
0.0.0.255
access-list 1 permit 10.0.15.0 0.0.0.255
access-list 1 permit 
172.16.1.0 0.0.0.255
access-list 1 permit 172.16.11.0 
0.0.0.255
!
!
control-plane
!
banner login ^CAuthorized access 
only!
 Disconnect IMMEDIATELY if you are not an authorized 
user!^C
!
line con 0
 login local
line aux 0
line vty 0 
4
 privilege level 15
 login local
 transport input 
telnet ssh
line vty 5 15
 privilege level 15
 login 
local
 transport input telnet 
ssh
!
end



 suggerimenti?
1) non postare in HTML
2) disattiva il gateway predefinito sulla connessione remota
-- 
		Luca Amicone
		ICQ: 14890779
		Microsoft MVP
"Risoluzione dei problemi relativi al servizio Condivisione connessione 
Internet" 
http://support.microsoft.com/?id=238135

 ha scritto nel messaggio
news:dr7m81$pai$1...@newsreader.mailgate.org...


 suggerimenti?
Toglila COMUNQUE come "default gateway" ed imposta una rotta di routing
che ti indirizza verso la VPN unicamente la subnet della rete remota
alla quale ti connetti.
-- 
		Luca Amicone
		ICQ: 14890779
		Microsoft MVP
"'Unable to Load the Dynamic Link Library' Error Message When You 
Install Drivers or Utilities" 
http://support.microsoft.com/?id=302590