Remote User not able to Connect Completely

Question

Hi,
not able to connect a remote user to our network. All other remote users are able to connect so I know the tunnel is up. When this user tries to connect using the cisco vpn client, I see their traffic coming through with the sh crytpo ipsec sa peer peer address. I can see their peer address and I can see their dhcp local allocated address - allocated from the firewall, and I can ping their peer address but I can't ping the dhcp allocated address.
Any ideas?
Thanks, Pat.

Answer 1

Email from user stating screen message:
tried to sign in again - VPN Client connects fine, but Fusion states "not connected to the network", even though VPN connected
Crypto map tag: OUTSIDE_dyn_map, seq num: 40, local addr: XX.XX.XX.XX
      local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
      remote ident (addr/mask/prot/port): (10.10.XX.XX/255.255.255.255/0/0)
      current_peer: 74.47.XX.XX, username: XXXXXXX
      dynamic allocated peer ip: 10.10.XX.XX
      #pkts encaps: 548, #pkts encrypt: 548, #pkts digest: 548
      #pkts decaps: 624, #pkts decrypt: 624, #pkts verify: 624
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 548, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #pkts no sa (send): 0, #pkts invalid sa (rcv): 0
      #pkts encaps failed (send): 0, #pkts decaps failed (rcv): 0
      #pkts invalid prot (rcv): 0, #pkts verify failed: 0
      #pkts invalid identity (rcv): 0, #pkts invalid len (rcv): 0
      #pkts invalid pad (rcv): 0,
      #pkts invalid ip version (rcv): 0,
      #pkts replay rollover (send): 0, #pkts replay rollover (rcv): 0
      #pkts replay failed (rcv): 0
      #pkts min mtu frag failed (send): 0, #pkts bad frag offset (rcv): 0
      #pkts internal err (send): 0, #pkts internal err (rcv): 0
      local crypto endpt.: XX.XX.XX.XX, remote crypto endpt.: 74.47.XX.XX
      path mtu 1500, ipsec overhead 58, media mtu 1500
      current outbound spi: F9F18F20
      current inbound spi : B27E9C25
    inbound esp sas:
      spi: 0xB27E9C25 (2994641957)
         transform: esp-3des esp-sha-hmac no compression
         in use settings ={RA, Tunnel, }
         slot: 0, conn_id: 166191104, crypto-map: OUTSIDE_dyn_map
         sa timing: remaining key lifetime (sec): 2902
         IV size: 8 bytes
         replay detection support: Y
         Anti replay bitmap:
          0x1FFFFFFF 0xFFFFFFFD
    outbound esp sas:
      spi: 0xF9F18F20 (4193357600)
         transform: esp-3des esp-sha-hmac no compression
         in use settings ={RA, Tunnel, }
         slot: 0, conn_id: 166191104, crypto-map: OUTSIDE_dyn_map
         sa timing: remaining key lifetime (sec): 2902
         IV size: 8 bytes
         replay detection support: Y
         Anti replay bitmap:
          0x00000000 0x00000001
Thanks, Pat.