Remote access using cellphones with wifi possible???

is it possible to remotely access your desktop using cellphone using internet(wi-fi)

can you tell me what is wifi??is it not a internet connection? >
It means a particular suite of wireless networking protocols: 802.11
WiFi only means "internet" if the router you're connecting to is itself connected to the internet - which isn't necessarily the case. Don't use technical terms unless you know exactly what they mean as you risk making your question less clear.

Similar Messages

Use safari with wifi

When I use safari with wifi, my ipad always reopen
I do not know what is the problem with ipad?
someone can help me to solve the promblem!!

Update: worked fine with free hilton wfi. Splash/redirect page loaded fine
Then failed to work again, this time with reagan airport wifi. After 30 mins on phone with apple support just mindlessly reading me through the generic support tips i already tried that didnt work, they gave up.
Now at marriott and redirect page worked and free wifi running with no problems.
How is it that i can be sitting next to someone at the airports that also has an ipad2 and they can connect fine and i cant??????? Are there really no solutions available?
And why is the final apple support suggestion from help desk to have the network router admin reset their router? 1) obviously not going to happen at public access points and 2) shouldnt apple design a product that can access these basic wifi interfaces that will commonly be encountered when using wifi without the need for network admin intervention????

Remote Access VPN Problem with ASA 5505

After about ~1 year of having the Cisco VPN Client connecting to a ASA 5505 without any problems, suddenly one day it stops working. The client is able to get a connection to the ASA and browse the local network for only about 30 seconds after connection. After that, no access is available to the network behind the ASA. I tried everything that I can think of to try and troubleshoot the problem, but at this point I am just banging my head against a wall. Does anyone know what could cause this?
Here is the running cfg of the ASA
: Saved
ASA Version 8.4(1)
hostname NCHCO
enable password xxxxxxxxxxxxxxx encrypted
passwd xxxxxxxxxxx encrypted
names
name 192.168.2.0 NCHCO description City Offices
name 192.168.2.80 VPN_End
name 192.168.2.70 VPN_Start
interface Vlan1
nameif inside
security-level 100
ip address 192.168.2.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address **.**.***.*** 255.255.255.248
interface Ethernet0/0
switchport access vlan 2
speed 100
duplex full
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
boot system disk0:/asa841-k8.bin
ftp mode passive
object network NCHCO
subnet 192.168.2.0 255.255.255.0
object network obj-192.168.1.0
subnet 192.168.1.0 255.255.255.0
object network obj-192.168.2.64
subnet 192.168.2.64 255.255.255.224
object network obj-0.0.0.0
subnet 0.0.0.0 255.255.255.0
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network Webserver
object network FINX
host 192.168.2.11
object service rdp
service tcp source range 1 65535 destination eq 3389
description rdp
access-list outside_nat0_outbound extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list outside_nat0_outbound extended permit ip object NCHCO 192.168.2.0 255.255.255.0
access-list inside_nat0_outbound extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list inside_nat0_outbound extended permit ip any 192.168.2.64 255.255.255.224
access-list inside_nat0_outbound extended permit ip 0.0.0.0 255.255.255.0 192.168.2.64 255.255.255.224
access-list outside_1_cryptomap extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list outside_1_cryptomap_1 extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list LAN_Access standard permit 192.168.2.0 255.255.255.0
access-list LAN_Access standard permit 0.0.0.0 255.255.255.0
access-list NCHCO_splitTunnelAcl_1 standard permit 192.168.2.0 255.255.255.0
access-list AnyConnect_Client_Local_Print extended deny ip any any
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq lpd
access-list AnyConnect_Client_Local_Print remark IPP: Internet Printing Protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq 631
access-list AnyConnect_Client_Local_Print remark Windows' printing port
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq 9100
access-list AnyConnect_Client_Local_Print remark mDNS: multicast DNS protocol
access-list AnyConnect_Client_Local_Print extended permit udp any host 224.0.0.251 eq 5353
access-list AnyConnect_Client_Local_Print remark LLMNR: Link Local Multicast Name Resolution protocol
access-list AnyConnect_Client_Local_Print extended permit udp any host 224.0.0.252 eq 5355
access-list AnyConnect_Client_Local_Print remark TCP/NetBIOS protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq 137
access-list AnyConnect_Client_Local_Print extended permit udp any any eq netbios-ns
access-list outside_access_in extended permit tcp any object FINX eq 3389
access-list outside_access_in_1 extended permit object rdp any object FINX
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
ip local pool VPN_Pool VPN_Start-VPN_End mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-649.bin
no asdm history enable
arp timeout 14400
nat (inside,any) source static NCHCO NCHCO destination static obj-192.168.1.0 obj-192.168.1.0
nat (inside,any) source static any any destination static obj-192.168.2.64 obj-192.168.2.64
nat (inside,any) source static obj-0.0.0.0 obj-0.0.0.0 destination static obj-192.168.2.64 obj-192.168.2.64
object network obj_any
nat (inside,outside) dynamic interface
object network FINX
nat (inside,outside) static interface service tcp 3389 3389
access-group outside_access_in_1 in interface outside
route outside 0.0.0.0 0.0.0.0 69.61.228.177 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
network-acl outside_nat0_outbound
webvpn
svc ask enable default svc
http server enable
http 192.168.1.0 255.255.255.0 inside
http **.**.***.*** 255.255.255.255 outside
http **.**.***.*** 255.255.255.255 outside
http NCHCO 255.255.255.0 inside
http 96.11.251.186 255.255.255.255 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set l2tp-transform esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set l2tp-transform mode transport
crypto ipsec ikev1 transform-set vpn-transform esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_SHA mode transport
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_MD5 mode transport
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group1
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto dynamic-map dyn-map 10 set pfs group1
crypto dynamic-map dyn-map 10 set ikev1 transform-set l2tp-transform vpn-transform
crypto dynamic-map dyn-map 10 set reverse-route
crypto dynamic-map outside_dyn_map 20 set ikev1 transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 20 set reverse-route
crypto map outside_map 1 match address outside_1_cryptomap
crypto map outside_map 1 set pfs group1
crypto map outside_map 1 set peer 74.219.208.50
crypto map outside_map 1 set ikev1 transform-set ESP-3DES-SHA
crypto map outside_map 20 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto map inside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map inside_map interface inside
crypto map vpn-map 1 match address outside_1_cryptomap_1
crypto map vpn-map 1 set pfs group1
crypto map vpn-map 1 set peer 74.219.208.50
crypto map vpn-map 1 set ikev1 transform-set ESP-3DES-SHA
crypto map vpn-map 10 ipsec-isakmp dynamic dyn-map
crypto isakmp identity address
crypto ikev1 enable inside
crypto ikev1 enable outside
crypto ikev1 ipsec-over-tcp port 10000
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
crypto ikev1 policy 15
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 35
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
client-update enable
telnet 192.168.1.0 255.255.255.0 inside
telnet NCHCO 255.255.255.0 inside
telnet timeout 5
ssh 192.168.1.0 255.255.255.0 inside
ssh NCHCO 255.255.255.0 inside
ssh timeout 5
console timeout 0
dhcpd address 192.168.2.150-192.168.2.225 inside
dhcpd dns 216.68.4.10 216.68.5.10 interface inside
dhcpd lease 64000 interface inside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy DefaultRAGroup internal
group-policy DefaultRAGroup attributes
dns-server value 192.168.2.1
vpn-tunnel-protocol ikev1 l2tp-ipsec
default-domain value nchco.local
group-policy DfltGrpPolicy attributes
dns-server value 192.168.2.1
vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-client ssl-clientless
password-storage enable
ipsec-udp enable
intercept-dhcp 255.255.255.0 enable
address-pools value VPN_Pool
group-policy NCHCO internal
group-policy NCHCO attributes
dns-server value 192.168.2.1 8.8.8.8
vpn-tunnel-protocol ikev1
split-tunnel-policy tunnelspecified
split-tunnel-network-list value NCHCO_splitTunnelAcl_1
default-domain value NCHCO.local
username admin password LbMiJuAJjDaFb2uw encrypted privilege 15
username 8njferg password yB1lHEVmHZGj5C2Z encrypted privilege 15
username NCHvpn99 password dhn.JzttvRmMbHsP encrypted
tunnel-group DefaultRAGroup general-attributes
address-pool (inside) VPN_Pool
address-pool VPN_Pool
authentication-server-group (inside) LOCAL
authentication-server-group (outside) LOCAL
authorization-server-group LOCAL
authorization-server-group (inside) LOCAL
authorization-server-group (outside) LOCAL
default-group-policy DefaultRAGroup
strip-realm
strip-group
tunnel-group DefaultRAGroup ipsec-attributes
ikev1 pre-shared-key *****
peer-id-validate nocheck
tunnel-group DefaultRAGroup ppp-attributes
no authentication chap
no authentication ms-chap-v1
authentication ms-chap-v2
tunnel-group DefaultWEBVPNGroup ppp-attributes
authentication pap
authentication ms-chap-v2
tunnel-group 74.219.208.50 type ipsec-l2l
tunnel-group 74.219.208.50 ipsec-attributes
ikev1 pre-shared-key *****
tunnel-group NCHCO type remote-access
tunnel-group NCHCO general-attributes
address-pool VPN_Pool
default-group-policy NCHCO
tunnel-group NCHCO ipsec-attributes
ikev1 pre-shared-key *****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:a2110206e1af06974c858fb40c6de2fc
: end
asdm image disk0:/asdm-649.bin
asdm location VPN_Start 255.255.255.255 inside
asdm location VPN_End 255.255.255.255 inside
no asdm history enable
And here is the logs from the Cisco VPN Client when it browses, then fails to browse the network behind the ASA:
Cisco Systems VPN Client Version 5.0.07.0440
Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.1.7601 Service Pack 1
Config file directory: C:\Program Files (x86)\Cisco Systems\VPN Client\
1      09:44:55.677 10/01/13 Sev=Info/6    CERT/0x63600026
Attempting to find a Certificate using Serial Hash.
2      09:44:55.677 10/01/13 Sev=Info/6    CERT/0x63600027
Found a Certificate using Serial Hash.
3      09:44:55.693 10/01/13 Sev=Info/6    GUI/0x63B00011
Reloaded the Certificates in all Certificate Stores successfully.
4      09:45:02.802 10/01/13 Sev=Info/4    CM/0x63100002
Begin connection process
5      09:45:02.802 10/01/13 Sev=Info/4    CM/0x63100004
Establish secure connection
6      09:45:02.802 10/01/13 Sev=Info/4    CM/0x63100024
Attempt connection with server "**.**.***.***"
7      09:45:02.802 10/01/13 Sev=Info/6    IKE/0x6300003B
Attempting to establish a connection with **.**.***.***.
8      09:45:02.818 10/01/13 Sev=Info/4    IKE/0x63000001
Starting IKE Phase 1 Negotiation
9      09:45:02.865 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to **.**.***.***
10     09:45:02.896 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
11     09:45:02.896 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Nat-T), NAT-D, NAT-D, VID(Frag), VID(?)) from **.**.***.***
12     09:45:02.896 10/01/13 Sev=Info/5    IKE/0x63000001
Peer is a Cisco-Unity compliant peer
13     09:45:02.896 10/01/13 Sev=Info/5    IKE/0x63000001
Peer supports XAUTH
14     09:45:02.896 10/01/13 Sev=Info/5    IKE/0x63000001
Peer supports DPD
15     09:45:02.896 10/01/13 Sev=Info/5    IKE/0x63000001
Peer supports NAT-T
16     09:45:02.896 10/01/13 Sev=Info/5    IKE/0x63000001
Peer supports IKE fragmentation payloads
17     09:45:02.927 10/01/13 Sev=Info/6    IKE/0x63000001
IOS Vendor ID Contruction successful
18     09:45:02.927 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, NAT-D, NAT-D, VID(?), VID(Unity)) to **.**.***.***
19     09:45:02.927 10/01/13 Sev=Info/4    IKE/0x63000083
IKE Port in use - Local Port = 0xDD3B, Remote Port = 0x01F4
20     09:45:02.927 10/01/13 Sev=Info/5    IKE/0x63000072
Automatic NAT Detection Status:
   Remote end is NOT behind a NAT device
   This   end is NOT behind a NAT device
21     09:45:02.927 10/01/13 Sev=Info/4    CM/0x6310000E
Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system
22     09:45:02.943 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
23     09:45:02.943 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from **.**.***.***
24     09:45:02.943 10/01/13 Sev=Info/4    CM/0x63100015
Launch xAuth application
25     09:45:03.037 10/01/13 Sev=Info/6    GUI/0x63B00012
Authentication request attributes is 6h.
26     09:45:03.037 10/01/13 Sev=Info/4    CM/0x63100017
xAuth application returned
27     09:45:03.037 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to **.**.***.***
28     09:45:03.037 10/01/13 Sev=Info/4    IPSEC/0x63700008
IPSec driver successfully started
29     09:45:03.037 10/01/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
30     09:45:03.083 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
31     09:45:03.083 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from **.**.***.***
32     09:45:03.083 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to **.**.***.***
33     09:45:03.083 10/01/13 Sev=Info/4    CM/0x6310000E
Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system
34     09:45:03.083 10/01/13 Sev=Info/5    IKE/0x6300005E
Client sending a firewall request to concentrator
35     09:45:03.083 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to **.**.***.***
36     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
37     09:45:03.146 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from **.**.***.***
38     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x63000010
MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 192.168.2.70
39     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x63000010
MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.0
40     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x63000010
MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 192.168.2.1
41     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x63000010
MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 8.8.8.8
42     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000001
43     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SPLIT_INCLUDE (# of split_nets), value = 0x00000001
44     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000F
SPLIT_NET #1
    subnet = 192.168.2.0
    mask = 255.255.255.0
    protocol = 0
    src port = 0
    dest port=0
45     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000E
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = NCHCO.local
46     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_UDP_NAT_PORT, value = 0x00002710
47     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000
48     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000E
MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc ASA5505 Version 8.4(1) built by builders on Mon 31-Jan-11 02:11
49     09:45:03.146 10/01/13 Sev=Info/5    IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SMARTCARD_REMOVAL_DISCONNECT: , value = 0x00000001
50     09:45:03.146 10/01/13 Sev=Info/4    CM/0x63100019
Mode Config data received
51     09:45:03.146 10/01/13 Sev=Info/4    IKE/0x63000056
Received a key request from Driver: Local IP = 192.168.2.70, GW IP = **.**.***.***, Remote IP = 0.0.0.0
52     09:45:03.146 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to **.**.***.***
53     09:45:03.177 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
54     09:45:03.177 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from **.**.***.***
55     09:45:03.177 10/01/13 Sev=Info/5    IKE/0x63000045
RESPONDER-LIFETIME notify has value of 86400 seconds
56     09:45:03.177 10/01/13 Sev=Info/5    IKE/0x63000047
This SA has already been alive for 1 seconds, setting expiry to 86399 seconds from now
57     09:45:03.193 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
58     09:45:03.193 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from **.**.***.***
59     09:45:03.193 10/01/13 Sev=Info/5    IKE/0x63000045
RESPONDER-LIFETIME notify has value of 28800 seconds
60     09:45:03.193 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK QM *(HASH) to **.**.***.***
61     09:45:03.193 10/01/13 Sev=Info/5    IKE/0x63000059
Loading IPsec SA (MsgID=967A3C93 OUTBOUND SPI = 0xAAAF4C1C INBOUND SPI = 0x3EBEBFC5)
62     09:45:03.193 10/01/13 Sev=Info/5    IKE/0x63000025
Loaded OUTBOUND ESP SPI: 0xAAAF4C1C
63     09:45:03.193 10/01/13 Sev=Info/5    IKE/0x63000026
Loaded INBOUND ESP SPI: 0x3EBEBFC5
64     09:45:03.193 10/01/13 Sev=Info/5    CVPND/0x63400013
    Destination           Netmask           Gateway         Interface   Metric
        0.0.0.0           0.0.0.0       96.11.251.1     96.11.251.149      261
    96.11.251.0     255.255.255.0     96.11.251.149     96.11.251.149      261
96.11.251.149   255.255.255.255     96.11.251.149     96.11.251.149      261
96.11.251.255   255.255.255.255     96.11.251.149     96.11.251.149      261
      127.0.0.0         255.0.0.0         127.0.0.1         127.0.0.1      306
      127.0.0.1   255.255.255.255         127.0.0.1         127.0.0.1      306
127.255.255.255   255.255.255.255         127.0.0.1         127.0.0.1      306
    192.168.1.0     255.255.255.0       192.168.1.3       192.168.1.3      261
    192.168.1.3   255.255.255.255       192.168.1.3       192.168.1.3      261
192.168.1.255   255.255.255.255       192.168.1.3       192.168.1.3      261
      224.0.0.0         240.0.0.0         127.0.0.1         127.0.0.1      306
      224.0.0.0         240.0.0.0     96.11.251.149     96.11.251.149      261
      224.0.0.0         240.0.0.0       192.168.1.3       192.168.1.3      261
255.255.255.255   255.255.255.255         127.0.0.1         127.0.0.1      306
255.255.255.255   255.255.255.255     96.11.251.149     96.11.251.149      261
255.255.255.255   255.255.255.255       192.168.1.3       192.168.1.3      261
65     09:45:03.521 10/01/13 Sev=Info/6    CVPND/0x63400001
Launch VAInst64 to control IPSec Virtual Adapter
66     09:45:03.896 10/01/13 Sev=Info/4    CM/0x63100034
The Virtual Adapter was enabled:
    IP=192.168.2.70/255.255.255.0
    DNS=192.168.2.1,8.8.8.8
    WINS=0.0.0.0,0.0.0.0
    Domain=NCHCO.local
    Split DNS Names=
67     09:45:03.912 10/01/13 Sev=Info/5    CVPND/0x63400013
    Destination           Netmask           Gateway         Interface   Metric
        0.0.0.0           0.0.0.0       96.11.251.1     96.11.251.149      261
    96.11.251.0     255.255.255.0     96.11.251.149     96.11.251.149      261
96.11.251.149   255.255.255.255     96.11.251.149     96.11.251.149      261
96.11.251.255   255.255.255.255     96.11.251.149     96.11.251.149      261
      127.0.0.0         255.0.0.0         127.0.0.1         127.0.0.1      306
      127.0.0.1   255.255.255.255         127.0.0.1         127.0.0.1      306
127.255.255.255   255.255.255.255         127.0.0.1         127.0.0.1      306
    192.168.1.0     255.255.255.0       192.168.1.3       192.168.1.3      261
    192.168.1.3   255.255.255.255       192.168.1.3       192.168.1.3      261
192.168.1.255   255.255.255.255       192.168.1.3       192.168.1.3      261
      224.0.0.0         240.0.0.0         127.0.0.1         127.0.0.1      306
      224.0.0.0         240.0.0.0     96.11.251.149     96.11.251.149      261
      224.0.0.0         240.0.0.0       192.168.1.3       192.168.1.3      261
      224.0.0.0         240.0.0.0           0.0.0.0           0.0.0.0      261
255.255.255.255   255.255.255.255         127.0.0.1         127.0.0.1      306
255.255.255.255   255.255.255.255     96.11.251.149     96.11.251.149      261
255.255.255.255   255.255.255.255       192.168.1.3       192.168.1.3      261
255.255.255.255   255.255.255.255           0.0.0.0           0.0.0.0      261
68     09:45:07.912 10/01/13 Sev=Info/4    CM/0x63100038
Successfully saved route changes to file.
69     09:45:07.912 10/01/13 Sev=Info/5    CVPND/0x63400013
    Destination           Netmask           Gateway         Interface   Metric
        0.0.0.0           0.0.0.0       96.11.251.1     96.11.251.149      261
**.**.***.***   255.255.255.255       96.11.251.1     96.11.251.149      100
    96.11.251.0     255.255.255.0     96.11.251.149     96.11.251.149      261
96.11.251.149   255.255.255.255     96.11.251.149     96.11.251.149      261
96.11.251.255   255.255.255.255     96.11.251.149     96.11.251.149      261
      127.0.0.0         255.0.0.0         127.0.0.1         127.0.0.1      306
      127.0.0.1   255.255.255.255         127.0.0.1         127.0.0.1      306
127.255.255.255   255.255.255.255         127.0.0.1         127.0.0.1      306
    192.168.1.0     255.255.255.0       192.168.1.3       192.168.1.3      261
    192.168.1.3   255.255.255.255       192.168.1.3       192.168.1.3      261
192.168.1.255   255.255.255.255       192.168.1.3       192.168.1.3      261
    192.168.2.0     255.255.255.0      192.168.2.70      192.168.2.70      261
    192.168.2.0     255.255.255.0       192.168.2.1      192.168.2.70      100
   192.168.2.70   255.255.255.255      192.168.2.70      192.168.2.70      261
192.168.2.255   255.255.255.255      192.168.2.70      192.168.2.70      261
      224.0.0.0         240.0.0.0         127.0.0.1         127.0.0.1      306
      224.0.0.0         240.0.0.0     96.11.251.149     96.11.251.149      261
      224.0.0.0         240.0.0.0       192.168.1.3       192.168.1.3      261
      224.0.0.0         240.0.0.0      192.168.2.70      192.168.2.70      261
255.255.255.255   255.255.255.255         127.0.0.1         127.0.0.1      306
255.255.255.255   255.255.255.255     96.11.251.149     96.11.251.149      261
255.255.255.255   255.255.255.255       192.168.1.3       192.168.1.3      261
255.255.255.255   255.255.255.255      192.168.2.70      192.168.2.70      261
70     09:45:07.912 10/01/13 Sev=Info/6    CM/0x63100036
The routing table was updated for the Virtual Adapter
71     09:45:07.912 10/01/13 Sev=Info/4    CM/0x6310001A
One secure connection established
72     09:45:07.943 10/01/13 Sev=Info/4    CM/0x6310003B
Address watch added for 96.11.251.149. Current hostname: psaserver, Current address(es): 192.168.2.70, 96.11.251.149, 192.168.1.3.
73     09:45:07.943 10/01/13 Sev=Info/4    CM/0x6310003B
Address watch added for 192.168.2.70. Current hostname: psaserver, Current address(es): 192.168.2.70, 96.11.251.149, 192.168.1.3.
74     09:45:07.943 10/01/13 Sev=Info/5    CM/0x63100001
Did not find the Smartcard to watch for removal
75     09:45:07.943 10/01/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
76     09:45:07.943 10/01/13 Sev=Info/4    IPSEC/0x63700010
Created a new key structure
77     09:45:07.943 10/01/13 Sev=Info/4    IPSEC/0x6370000F
Added key with SPI=0x1c4cafaa into key list
78     09:45:07.943 10/01/13 Sev=Info/4    IPSEC/0x63700010
Created a new key structure
79     09:45:07.943 10/01/13 Sev=Info/4    IPSEC/0x6370000F
Added key with SPI=0xc5bfbe3e into key list
80     09:45:07.943 10/01/13 Sev=Info/4    IPSEC/0x6370002F
Assigned VA private interface addr 192.168.2.70
81     09:45:07.943 10/01/13 Sev=Info/4    IPSEC/0x63700037
Configure public interface: 96.11.251.149. SG: **.**.***.***
82     09:45:07.943 10/01/13 Sev=Info/6    CM/0x63100046
Set tunnel established flag in registry to 1.
83     09:45:13.459 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to **.**.***.***
84     09:45:13.459 10/01/13 Sev=Info/6    IKE/0x6300003D
Sending DPD request to **.**.***.***, our seq# = 107205276
85     09:45:13.474 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
86     09:45:13.474 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from **.**.***.***
87     09:45:13.474 10/01/13 Sev=Info/5    IKE/0x63000040
Received DPD ACK from **.**.***.***, seq# received = 107205276, seq# expected = 107205276
88     09:45:15.959 10/01/13 Sev=Info/4    IPSEC/0x63700019
Activate outbound key with SPI=0x1c4cafaa for inbound key with SPI=0xc5bfbe3e
89     09:46:00.947 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to **.**.***.***
90     09:46:00.947 10/01/13 Sev=Info/6    IKE/0x6300003D
Sending DPD request to **.**.***.***, our seq# = 107205277
91     09:46:01.529 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
92     09:46:01.529 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from **.**.***.***
93     09:46:01.529 10/01/13 Sev=Info/5    IKE/0x63000040
Received DPD ACK from **.**.***.***, seq# received = 107205277, seq# expected = 107205277
94     09:46:11.952 10/01/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to **.**.***.***
95     09:46:11.952 10/01/13 Sev=Info/6    IKE/0x6300003D
Sending DPD request to **.**.***.***, our seq# = 107205278
96     09:46:11.979 10/01/13 Sev=Info/5    IKE/0x6300002F
Received ISAKMP packet: peer = **.**.***.***
97     09:46:11.979 10/01/13 Sev=Info/4    IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from **.**.***.***
98     09:46:11.979 10/01/13 Sev=Info/5    IKE/0x63000040
Received DPD ACK from **.**.***.***, seq# received = 107205278, seq# expected = 107205278
Any help would be appreciated, thanks!

I made the change that you requested by moving the VPN pool to the 192.168.3.0 network. Unfortunately, now traffic isn't flowing to the inside network at all. I was going to make a specific route as you suggested, but as far as I can see the routes are already being created correctly on the VPN client's end.
Here is the route print off of the computer behind the (test) client:
===========================================================================
Interface List
21...00 05 9a 3c 78 00 ......Cisco Systems VPN Adapter for 64-bit Windows
10...00 15 5d 01 02 01 ......Microsoft Hyper-V Network Adapter
15...00 15 5d 01 02 02 ......Microsoft Hyper-V Network Adapter #2
1...........................Software Loopback Interface 1
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
11...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
14...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface Metric
          0.0.0.0          0.0.0.0      96.11.251.1    96.11.251.149    261
    69.61.228.178 255.255.255.255      96.11.251.1    96.11.251.149    100
      96.11.251.0    255.255.255.0         On-link     96.11.251.149    261
    96.11.251.149 255.255.255.255         On-link     96.11.251.149    261
    96.11.251.255 255.255.255.255         On-link     96.11.251.149    261
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1 255.255.255.255         On-link         127.0.0.1    306
127.255.255.255 255.255.255.255         On-link         127.0.0.1    306
      192.168.1.0    255.255.255.0         On-link       192.168.1.3    261
      192.168.1.3 255.255.255.255         On-link       192.168.1.3    261
    192.168.1.255 255.255.255.255         On-link       192.168.1.3    261
      192.168.2.0    255.255.255.0      192.168.3.1     192.168.3.70    100
      192.168.3.0    255.255.255.0         On-link      192.168.3.70    261
     192.168.3.70 255.255.255.255         On-link      192.168.3.70    261
    192.168.3.255 255.255.255.255         On-link      192.168.3.70    261
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link       192.168.1.3    261
        224.0.0.0        240.0.0.0         On-link     96.11.251.149    261
        224.0.0.0        240.0.0.0         On-link      192.168.3.70    261
255.255.255.255 255.255.255.255         On-link         127.0.0.1    306
255.255.255.255 255.255.255.255         On-link       192.168.1.3    261
255.255.255.255 255.255.255.255         On-link     96.11.251.149    261
255.255.255.255 255.255.255.255         On-link      192.168.3.70    261
===========================================================================
Persistent Routes:
Network Address          Netmask Gateway Address Metric
          0.0.0.0          0.0.0.0      96.11.251.1 Default
===========================================================================
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination      Gateway
14   1020 ::/0                     2002:c058:6301::c058:6301
14   1020 ::/0                     2002:c058:6301::1
1    306 ::1/128                  On-link
14   1005 2002::/16                On-link
14    261 2002:600b:fb95::600b:fb95/128
                                    On-link
15    261 fe80::/64                On-link
10    261 fe80::/64                On-link
21    261 fe80::/64                On-link
10    261 fe80::64ae:bae7:3dc0:c8c4/128
                                    On-link
21    261 fe80::e9f7:e24:3147:bd/128
                                    On-link
15    261 fe80::f116:2dfd:1771:125a/128
                                    On-link
1    306 ff00::/8                 On-link
15    261 ff00::/8                 On-link
10    261 ff00::/8                 On-link
21    261 ff00::/8                 On-link
===========================================================================
Persistent Routes:
None
And here is the updated running config in case you need it:
: Saved
ASA Version 8.4(1)
hostname NCHCO
enable password hTjwXz/V8EuTw9p9 encrypted
passwd hTjwXz/V8EuTw9p9 encrypted
names
name 192.168.2.0 NCHCO description City Offices
name 192.168.2.80 VPN_End
name 192.168.2.70 VPN_Start
interface Vlan1
nameif inside
security-level 100
ip address 192.168.2.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address 69.61.228.178 255.255.255.248
interface Ethernet0/0
switchport access vlan 2
speed 100
duplex full
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
boot system disk0:/asa841-k8.bin
ftp mode passive
object network NCHCO
subnet 192.168.2.0 255.255.255.0
object network obj-192.168.1.0
subnet 192.168.1.0 255.255.255.0
object network obj-192.168.2.64
subnet 192.168.2.64 255.255.255.224
object network obj-0.0.0.0
subnet 0.0.0.0 255.255.255.0
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network Webserver
object network FINX
host 192.168.2.11
object service rdp
service tcp source range 1 65535 destination eq 3389
description rdp
object network obj-192.168.3.0
subnet 192.168.3.0 255.255.255.0
object network obj-192.168.2.0
subnet 192.168.2.0 255.255.255.0
access-list outside_nat0_outbound extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list outside_nat0_outbound extended permit ip object NCHCO 192.168.2.0 255.255.255.0
access-list inside_nat0_outbound extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list inside_nat0_outbound extended permit ip any 192.168.2.64 255.255.255.224
access-list inside_nat0_outbound extended permit ip 0.0.0.0 255.255.255.0 192.168.2.64 255.255.255.224
access-list outside_1_cryptomap extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list outside_1_cryptomap_1 extended permit ip object NCHCO 192.168.1.0 255.255.255.0
access-list LAN_Access standard permit 192.168.2.0 255.255.255.0
access-list LAN_Access standard permit 0.0.0.0 255.255.255.0
access-list NCHCO_splitTunnelAcl_1 standard permit 192.168.2.0 255.255.255.0
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq lpd
access-list AnyConnect_Client_Local_Print remark IPP: Internet Printing Protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq 631
access-list AnyConnect_Client_Local_Print remark Windows' printing port
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq 9100
access-list AnyConnect_Client_Local_Print remark mDNS: multicast DNS protocol
access-list AnyConnect_Client_Local_Print extended permit udp any host 224.0.0.251 eq 5353
access-list AnyConnect_Client_Local_Print remark LLMNR: Link Local Multicast Name Resolution protocol
access-list AnyConnect_Client_Local_Print extended permit udp any host 224.0.0.252 eq 5355
access-list AnyConnect_Client_Local_Print remark TCP/NetBIOS protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any any eq 137
access-list AnyConnect_Client_Local_Print extended permit udp any any eq netbios-ns
access-list AnyConnect_Client_Local_Print extended deny ip any any
access-list outside_access_in extended permit tcp any object FINX eq 3389
access-list outside_access_in_1 extended permit object rdp any object FINX
access-list outside_specific_blocks extended deny ip host 121.168.66.35 any
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
ip local pool VPN_Pool VPN_Start-VPN_End mask 255.255.255.0
ip local pool VPN_Split_Pool 192.168.3.70-192.168.3.80 mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-649.bin
no asdm history enable
arp timeout 14400
nat (inside,any) source static NCHCO NCHCO destination static obj-192.168.1.0 obj-192.168.1.0
nat (inside,any) source static any any destination static obj-192.168.2.64 obj-192.168.2.64
nat (inside,any) source static obj-0.0.0.0 obj-0.0.0.0 destination static obj-192.168.2.64 obj-192.168.2.64
object network obj_any
nat (inside,outside) dynamic interface
object network FINX
nat (inside,outside) static interface service tcp 3389 3389
access-group outside_access_in_1 in interface outside
route outside 0.0.0.0 0.0.0.0 69.61.228.177 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
network-acl outside_nat0_outbound
webvpn
svc ask enable default svc
http server enable
http 192.168.1.0 255.255.255.0 inside
http 69.61.228.178 255.255.255.255 outside
http 74.218.158.238 255.255.255.255 outside
http NCHCO 255.255.255.0 inside
http 96.11.251.186 255.255.255.255 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set l2tp-transform esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set l2tp-transform mode transport
crypto ipsec ikev1 transform-set vpn-transform esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_SHA mode transport
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set TRANS_ESP_3DES_MD5 mode transport
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group1
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto dynamic-map dyn-map 10 set pfs group1
crypto dynamic-map dyn-map 10 set ikev1 transform-set l2tp-transform vpn-transform
crypto dynamic-map dyn-map 10 set reverse-route
crypto dynamic-map outside_dyn_map 20 set ikev1 transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 20 set reverse-route
crypto map outside_map 1 match address outside_1_cryptomap
crypto map outside_map 1 set pfs group1
crypto map outside_map 1 set peer 74.219.208.50
crypto map outside_map 1 set ikev1 transform-set ESP-3DES-SHA
crypto map outside_map 20 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto map inside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map inside_map interface inside
crypto map vpn-map 1 match address outside_1_cryptomap_1
crypto map vpn-map 1 set pfs group1
crypto map vpn-map 1 set peer 74.219.208.50
crypto map vpn-map 1 set ikev1 transform-set ESP-3DES-SHA
crypto map vpn-map 10 ipsec-isakmp dynamic dyn-map
crypto isakmp identity address
crypto ikev1 enable inside
crypto ikev1 enable outside
crypto ikev1 ipsec-over-tcp port 10000
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
crypto ikev1 policy 15
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 35
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
client-update enable
telnet 192.168.1.0 255.255.255.0 inside
telnet NCHCO 255.255.255.0 inside
telnet timeout 5
ssh 192.168.1.0 255.255.255.0 inside
ssh NCHCO 255.255.255.0 inside
ssh 96.11.251.186 255.255.255.255 outside
ssh timeout 5
console timeout 0
dhcpd address 192.168.2.150-192.168.2.225 inside
dhcpd dns 216.68.4.10 216.68.5.10 interface inside
dhcpd lease 64000 interface inside
threat-detection basic-threat
threat-detection statistics host
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy DefaultRAGroup internal
group-policy DefaultRAGroup attributes
dns-server value 192.168.2.1
vpn-tunnel-protocol ikev1 l2tp-ipsec
default-domain value nchco.local
group-policy DfltGrpPolicy attributes
dns-server value 192.168.2.1
vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-client ssl-clientless
password-storage enable
ipsec-udp enable
intercept-dhcp 255.255.255.0 enable
address-pools value VPN_Split_Pool
group-policy NCHCO internal
group-policy NCHCO attributes
dns-server value 192.168.2.1 8.8.8.8
vpn-tunnel-protocol ikev1
split-tunnel-policy tunnelspecified
split-tunnel-network-list value NCHCO_splitTunnelAcl_1
default-domain value NCHCO.local
username admin password LbMiJuAJjDaFb2uw encrypted privilege 15
username 8njferg password yB1lHEVmHZGj5C2Z encrypted privilege 15
username NCHvpn99 password dhn.JzttvRmMbHsP encrypted
tunnel-group DefaultRAGroup general-attributes
address-pool (inside) VPN_Pool
address-pool VPN_Split_Pool
authentication-server-group (inside) LOCAL
authentication-server-group (outside) LOCAL
authorization-server-group LOCAL
authorization-server-group (inside) LOCAL
authorization-server-group (outside) LOCAL
default-group-policy DefaultRAGroup
strip-realm
strip-group
tunnel-group DefaultRAGroup ipsec-attributes
ikev1 pre-shared-key *****
peer-id-validate nocheck
tunnel-group DefaultRAGroup ppp-attributes
no authentication chap
no authentication ms-chap-v1
authentication ms-chap-v2
tunnel-group DefaultWEBVPNGroup ppp-attributes
authentication pap
authentication ms-chap-v2
tunnel-group 74.219.208.50 type ipsec-l2l
tunnel-group 74.219.208.50 ipsec-attributes
ikev1 pre-shared-key *****
tunnel-group NCHCO type remote-access
tunnel-group NCHCO general-attributes
address-pool VPN_Split_Pool
default-group-policy NCHCO
tunnel-group NCHCO ipsec-attributes
ikev1 pre-shared-key *****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:9e8466cd318c0bd35bc660fa65ba7a03
: end
asdm image disk0:/asdm-649.bin
asdm location VPN_Start 255.255.255.255 inside
asdm location VPN_End 255.255.255.255 inside
no asdm history enable
Thanks again for your help,
Matthew

Remote Access VPN posturing with Cisco ISE 1.1.1

Hi all,
we would like to start using our ISE for Remote VPN access.
We have run a proof of concept with the ISE & IPEP with a Cisco ASA5505. We got the authentication working however posturing of the client did not work.
That was a few months ago and so I was wondering whether any design document is available specifically around Using the Cisco ISE for Authenticating & Posturing Remote Access VPN clients.
I understand that version 9 of the ASA code is supposed to eliminate the need for Inline Posture, does anyone know whether this will also allow posturing too?
We do intend to by Cisco ASR's aswell, but I am sceptical of this as i do not know how many VPN licenses you get out of the box. The ASA's we have allow up to 5000 IPSec VPNs without having to purchase any licensing. What I do not want to do is to switch to SSL VPNs as this again will increase cost.
I know ISR's are support NADs but what about ASRs? There is no mention.
Any advise will be appreciated!
Mario

OK, I have come accross the Cisco Validated design for BYOD and in there it has a section about Authenticating VPNs.
thats great... however it does not mention using the Inline posture node. Does anyone know if there is a limitation using Inline Posture and SSL VPNs...?
essentially my requirements are
2-factor authentication VPN using a Certificate & RSA Token
Posturing of the VPN endpoint.
Ideally i would like to use IPSec VPNs as i have licenses already for these on my ASAs. But if it will only work with SSL & AnyConnect, then so be it.
Can anyone help?
Mario

Apple Remote Desktop - Using it with a dynamic IP Address

Hello.
I'd like to use Apple Remote Desktop on a computer that has a dynamic IP. That makes it pretty hard to access the computer if the IP changes.
I remember that Timbuktu had a "find the computer" feature that would let you register an e-mail address and attach it to a computer running their software. you could use timbuktu to find the e-mail address, and their server would attach it the the machine's IP, and you'd always connect.
Does Apple Remote Access have any feature like this? If not, is there any way to access a machine when the IP changes periodically?
Thanks,
---------------S

Hi Steve
I've always used the free DynDNS service, coupled with DynDNS Updater software on the computer you want to access. The software reports to the service when its IP changes, and the service gives you a fixed domain name such as mycomputer.dyndns.org, which you can then use from ARD.
Matt

Lanuch Remote Access Management Console with a connection to a remote server

I've installed the Remote Access Management Console on my Windows 8 workstation so that I can administer DirectAccess on a Windows Server 2012 server without having to connect to it with Remote Desktop. However, every time I launch the console I have to
click "Manage a remote server" and enter the server name. Is there a way to launch the console with a command-line parameter that opens the remote server automatically?
I've tried running ramgmtui.exe with the name of the server as a parameter, and I've also tried running "ramgmtui.exe /?" but the console doesn't launch at all when called with any of the parameters I've tried.

Hi,
Have you installed Remote Server Administration Tools?
You may use Server Manager to Manage another server. Once you add a server, it will be listed in All Servers. So you will never have to enter the server name.
For detailed information, please view the link below,
Manage Multiple, Remote Servers with Server Manager
http://technet.microsoft.com/en-us/library/hh831456.aspx
Hope this helps.
Steven Lee
TechNet Community Support

Using internet with wifi

How do you use the internet with wifi so that you don't need to have the data plan?

please read this article from the public knowledge base:
Article ID: KB14396 How to access BlackBerry services that use Wi-Fi technology with only a voice service plan
To sum up, you can't use Wi-Fi on a BlackBerry smartphone without the BlackBerry data plan.
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Remote Access VPN Users with CX Active Authentication.

I have ASA 5515 with CX for webfiltering , also have enabled remote access vpn . All my inside users are able to get active and passive authentication correctly . But for remote access VPN users , they are redirected to ASA external ip and CX authentication port 9000 but a blank page comes in and there is no prompt for authentication. I wasnt doing split tunneling , but now i have excluded ASA WAN ip from the tunnel and still have the same issue.
The CX version we have is 9.3.1.1

Have you excluded the VPN traffic from being NATed when traffic is going between clients?
Please post a full sanitised configuration of the router so we can check it for configuration issues.
Please remember to select a correct answer and rate helpful posts

Using Browser with WiFi

Greetings. I just purchased a bb curve 9320 and I'm very happy with it. I bought it unlocked and I'm using it with T-Mobile_text and talk only(no data plan)
I have one concern: I've been reading in some forums people say they have trouble and complain that WiFi options are very limited without a data plan.
I have successfully connected my WiFi and I'm using the native browser to surf the web. Does this mean I might get charged extra at the end of the month? I want to make sure I'm not using any features that are supposed to work only with data and I'm getting charged extra.
Thank you!

Hello as_1000 and welcome to the BlackBerry® Support Community Forums.
Thanks for your question on Wi-Fi® usage.
Any questions related to billing and charges are best addressed by your mobile carrier since they control the billing.
I would suggest you give T-Mobile a call and inquire about billing questions.
Thanks!
-HMthePirate
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

Can I use Ipad2 with wifi +3G with an Alltel Motorola MilestoneX 3g hotspot phone?

Alltel is my mobile service provider, and they are now offering the Motorola Milestone X running Android 2.2; this phone can function as a 3G hotspot. If I have an Ipad2 with wifi+3g, and I turn the hotspot functionality of the phone on, can my Ipad then connect to that hotspot signal created by my phone--even though my service is through Alltel and not Verizon or ATT? Alltel charges $20 a month for this functionality on top of my smartphone plan, but it provides unlimited data usage. The fee for 3G Ipad date service for both Verizon and ATT is just a little more, but they have data limits on those plans.
Any assistance/info you can provide will be appreciated!

ok, so the phone creates a wifi signal, not a 3g signal--then the Ipad connects via wifi, not 3G, to the phone-- and then gets data off the 3G network ...that is where I was confused. Data flows from the Alltel 3G signal to the phone, then from the phone's wifi hotspot via a wifi signal to ipad's wifi receiver...
I was not sure if the phone "created" a 3G signal that the Ipad was then supposed to connect to...
Much clearer now...thanks!
So, if this is how I am going to use it, do I even need the Ipad+3G--I really would only need the Ipad2+wifi, correct???

Can you use facetime with wifi only? No SIM card in iphone4

Party A: No SIM Card, in US, calling using WIFI
Party B: SIM Card, in another country, receiving calls, with WIFI
Can Party A and B connect through Facetime?
Thanks for your time.

sasan007 wrote:
You can make video calls through skype.I think without sim you cannot use facetime because facetime needs your sim number.
Slight correction: FaceTime on the *iPhone* needs your SIM number. FaceTime on the iPod Touch, iPad and MacOS have no such need.
This is one of the things I hate about Apple. Why not just allow everything to behave the same? Why should FaceTime, a non-cellular application, have to behave differently on the iPhone than on all other platforms?
(I also don't like that Videos lives in the iPod app on the iPhone, but has it's own app on the iPod Touch and iPad)

Remote access using ssh/vnc

Hi All!
Recently, I have managed to configure my Airport Base station to accept SSH using the port mapping/forwarding feature...
The main goal is to remotely access my mac in the office using SSH and VNC.
I was able to do this however remote Mac is using a high resolution which makes it slow to manage.[really slow].
I am currently using a Windows SSH tool called Putty.. and Real VNC to manage remote mac.
I tried to change the setting of Real VNC to a lower resolution but it would not work..accessing the remote mac will only work if my Windows VNC is set to use the
"Full" colour level.
Is this a windows issue? I haven't tried using a VNC for Mac though..
any other tool that is available out there aside from Apple Remote desktop?
Thanks, All!!!!
DP

so the system server VNC refers to the MAC os x VNC...
No, Vine Server's System Server is Vine Server starting up at boot time and is always running. Vine Server existed before Mac OS X included its own VNC server, so Vine Server's terminology is a bit confusing, but it wasn't when the started using it (it even sounds confusing when I just said it ).
the Vine server itself is the stand alone vnc.
Yes. The Vine Server is a totally separate VNC server implementation. It may be run interactively, or it may be configured to start at system boot time so it is always running (this is the system server mode of Vine Server).
so , OS X's VNC is set to only accept high res..
I do not know if it can ONLY do the resolution of the display, but anytime I've tried to use a VNC client configured for lower resolution, the Mac OS X VNC server has not behaved well. Rather than fight it, I just resort to Vine Server. It has been a rock solid VNC server.
so connecting to the Vine server should be at any port not the 5900as this is the mac os vnc default port.
If you MAKE ABSOLUTELY SURE that the Mac OS X VNC server is NOT running, you can use port 5900 for Vine Server, but I find it is safer to just give the Vine Server its own port, and commonly that is port 5901, but the Vine Server can be configured to use any port you desire.
Since I do not use a VNC client on Windows, I can not recommend any clients. However, I have heard of the following:
RealVNC
TightVNC
UltraVNC
I am sure there are others, but not being plugged into Windows culture, my depth of knowledge is very limited.

My laptop is dead and I need to remote access my files, is this possible?

I'm at my parent's place for the weekend and I forgot to bring my charger, I have an essay to finish for Monday but my laptop it completely dead! Is there any way i can remote access my files on their desktop?

yes, but I'm sure you won't do that.
take off back cover from MBP
detach HD
download fresh Ubuntu Live CD
burn it
install Mac HD into desktop. Be careful to not short circut something.
find USB stick
you're ready.
boot from Ubuntu live
go to Macintosh HD - Users - your user - documents
find needed document there
insert USB stick
copy document to it
shutdown
remove Mac HD from PC, set it back to mac
reboot Pc, remove ubuntu DVD
find your documents on USB stick.
sure you want all that mess?

Remote access using a web browser

Does anyone know how secure your system is accessing labview remotely.
Whenever you're accessing Labview(port 80) from a remote location
through a web browser there is nothing stopping a hacker from gaining
access to your system.
Is there anyway to prevent outside access to the sytem?

Casey wrote:
> Does anyone know how secure your system is accessing labview remotely.
> Whenever you're accessing Labview(port 80) from a remote location
> through a web browser there is nothing stopping a hacker from gaining
> access to your system.
>
> Is there anyway to prevent outside access to the sytem?
Well, if you prevent outside access you automatically prevent access
altogether so you won't be able to use a browser to connect to it. If a
browser can connect anyone with some TCP/IP knowledge can connect too.
If you want to disable that possibility you also disable access by browsers.
However the WebServer in LabVIEW is fairly secure and it is quite
unlikely that you can abuse it to gain access to your machine. The
biggest risk would be a DOS attack which in older versions of LabVIEW
were possible at some time.
You have some options. If you only need access to the WebServer from
your Intranet, simply don't allow routing from outside traffic to your
LabVIEW computer at all. You configure this in your firewall.
I assume you have a firewall, (not the playtoy included in Windows XP
but a real one) because if you haven't you have a lot more and bigger
problems to worry before you even think about a possible vulnerability
in the LabVIEW WebServer.
If you do need to have outside access to your LabVIEW WebServer you can
configure the firewall to only allow outside access to port 80 on your
LabVIEW computers IP address. And if that seems still scary to you the
better approach is to use a real WebServer such as Apache and do
everything there. Don't forget the firewall though. Eventhough Apache
may have some security problems every now and then, they are usually
discovered fast and fixed even faster. So if you monitor the situation
and react on known vulneribilities you can have a very secure system.
LabVIEW vulneribilities are often not found as fast because a lot less
people use it and even fewer try to actually seek out such systems and
attack them on purpose.
Rolf Kalbermatter
Rolf Kalbermatter
CIT Engineering Netherlands
a division of Test & Measurement Solutions

Stops working when using it with wifi antenna adapter. Good with 3.6 but now that I have 5 I can't find how to change back.

I live on a boat so I use a wifi antenna adapter to get internet. I used mozilla 3.6 until 5 came out and I updated. After that my internet stops more so I called the manufacturer and he said it doesn't work well with Mozilla 5 and I should change back to 3.6. Its not that it stops so much as when it does stop, I need to access the program that can change the source of the internet connection and with 5.0, it won't open the program so I can't use it. I tried to download 3.6 again and can't find it to download. Now I have to use internet explorer which I don't like.

Hi Cynthia,
Welcome to Adobe forum.
In order to install your Photoshop CC you will have to install Creative Cloud app.
To install it please visit below given link and login with your ID:
www.creative.adobe.com
Once logged in on top left corner you will have an option 'Download Center', please click on that and Download an app named Creative Cloud.
Once its downloaded please install it and open it, once it is opened please go to 'Apps' tab and then you will see all the software's to install.
Please look for Photoshop CC and click on Install infront of it and it will install it.
Once installed please open it and use it.

Remote access using cellphones with wifi possible???

Similar Messages

Maybe you are looking for