VPN Issues: Unable to access internet once connected.

I need to connect to my workplace via a VPN (Cisco IPSec) connection. Typically we use a Cisco VPN client to allow for access, but I'm using the built in support within Mountain Lion.
I am able to succesfully connect via the VPN connection, but once connected I am unable to proceed to access any websites, and when I lauch terminal and try to ping anything, it just sits and waits.
I have sorted the network connections so that the VPN is at the top of the sort order within the Network Preferences?
Any suggestions:

Maybe one of these Apple support articles will help:
http://support.apple.com/kb/PH10759
http://support.apple.com/kb/PH11067
http://support.apple.com/kb/PH10755
http://support.apple.com/kb/PH11138

Similar Messages

  • I have restored my i pad 2 and am now unable to access internet banking. the message tells me my browser is not supported. how do I correct this please?

    I had to restore my i pad to delete restrictions on facetime. I am now unable to access internet banking with Natwest due to my browser not being supported? How do I correct this? It was working ok before i did the restore. Thankyou.

    You are most welcome

  • Unable to Access Internet Despite Adapter Showing "Connected".

    Hi, I have a Lenovo "G"-Series notebook, Type 4446-38U which has suddenly stopped allowing me to access my internet connections.  The PC is only about a month old.  It is running XP Professional. 
    I have three connection options:  1) dial-up (using an onboard HDAudio Soft Data Fax Modem with Smart CP); 2) ethernet or Local Area Connection (using an onboard Broadcom Netlink Fast Ethernet); and 3) wireless (using an onboard Intel WiFi Link 5100 AGN) -- none of these components are showing that they have conflicts/problems in the System Properties/Device Manager. 
    At my home, which is located in a rural area where I can only get dial-up, I tried checking my e-mail last week (with Mozilla Thunderbird), but received an error notice stating that the e-mail server could not be found; it was the same issue, when I tried to get Norton virus updates (Internet Security 2009), XP updates on the Microsoft website (using Microsoft Updates with Internet Explorer), and simply accessing the web (using Mozilla Firefox) -- i.e., "Server Not Found."  The odd thing is that I can not only hear the connection being made by the modem, but can also see that the device is 'Connected', when I check the connection in Control Panel/Network Connections.  The following day at my office, I checked the other connection options (ethernet & WiFi), and found that I had the same problem -- i.e., they were shown as "Connected" in Control Panel/Network Connections, but I was unable to access anything on the web (e.g., e-mail, Google, virus/Microsoft updates, etc.).  It's as if there is something blocking the internet connection to these programmes/utilities. 
    When I ran the Microsoft Networking Troubleshooter ('Diagnose Network Configuration & Run Automated Networking Tests), all the Network Adapters were shown as having passed.  Ditto, when I ran the "Test a TCP/IP Configuration Using the Ping Command" -- pinging 127.0.0.1, the results showed 4 packets sent and 4 received.
    I spent several hours on the phone with Lenovo Tech Support to no avail, and their instruction that I uninstall Norton Internet Security made no difference either.  When they instructed me to open a Command Prompt and ping 192.168.1.1, the results showed that there were 4 packets sent and 4 received.  When I was instructed to ping the IP Address for the wireless adapter, the results showed 4 packets send and 4 received.  When I was instructed to ping www.google.com, the results showed that the ping request could not find the host www.google.com.  Lenovo Tech Support stated that there was nothing further they could do, and that I needed to use a utility to set everything back to factory specs (i.e., have a utility programme erase everything on the hard drive and reinstall XP ... and even then I was told that there was no guarantee that would fix things, meaning that the PC would then have to be sent into their repair depot).  Before I do this, I was hoping that someone here might know as to what's going on with my connection problems and how it could be fixed, without having to erase everything.
    I would appreciate any insight or advice anyone might have.  Thanks so much!
    ~ Jack

    I did do a complete uninstall of Norton (i.e., didn't save any of the settings), but that didn't resolve the connection problem.  I also turned off Microsoft's firewall as well, once Norton was uninstalled (it had been turned off, when Norton was installed, and once Norton was uninstalled, MS firewall defaulted back to an on/active status).
    I also forgot to mention in my initial description of the problem and actions taken thus far to try and correct it, that I additionally tried the "ping" procedure described in paragraph five above in Windows Safe Mode with Networking, but was still unable to connect to the internet.

  • Ipad is connected to the wifi but unable to access internet or receive mail.

    Recently set up new broadband connection. Wifi set up and iphone, computer all able to connect to wifi and internet. Ipad recognises old networks and able to connect for wifi access, but for this new connection I am able to connect with the ipad but it does not seem to be able to receive or transmit any information, hence I am unable to access any internet, update any apps or check my email. Can anyone help? I've tried rebooting the system, forgetting the network and shutting the ipad off, all to no avail!

    I've rebooted the router, I've made the ipad forget previous settings, rebooted the ipad, called the useless talktalk technical help. I have used this ipad previously with a previous talktalk connection. I'm not sure why this time I can't connect - perhaps its the security setting on the new router that isn't competible with the ipad? I'm using a D-link DSL-3680 router if that helps

  • Unable to access Internet using a Mobile Network

    Hello friends
    I recently updated my SE Xperia mini pro 17i (2011 model) to ICS, initially there were some issues and I had to re-update it to finally get authentic interface of ICS. Even after the successful update I am unable to use the mobile network to access Internet, the only way  is to use a Wifi instead. Can somebody please help me out with this issue?
    Karan

    The first thing I would advise doing is contacting your current network provider and have them send you through the relevant internet settings.
    What are your thoughts about this forum? Let us know by doing this short survey.
     - Official Sony Xperia Support Staff
    If you're new to our forums make sure that you have read our Discussion guidelines.
    If you want to get in touch with the local support team for your country please visit our contact page.

  • Can access internet when connected w/ethernet cables in router, but WRT54G says it can't connect

    I have my router, modem, and computer all set up correctly. I can access the internet in this setup but with only the computer that is connected with the ethernet cord to the router. Yet, my WRT54G router can't connect to the internet in the Linksys easy setup nor through the http:192.168.1.1 method.
    When I changed the internet connection type to PPPoE, my modem was unable to access the internet. I also changed the IP to 192.168.2.1 but that didn't help. I have performed several power cycles. I have upgraded the firmware.
    I changed the internet connection type back to DHCP, so I am able to come on this website, but I can't set up the wireless since the router says it can't connect to the internet. Please help!

    Start it from scratch...Reset your router and re-configure it...
    Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...
    Also make sure that your computer is set to obtain IP automatically, disable any firewalls, security softwares on the computer before trying to access the setup page.
    If your Internet Service Providor is Cable follow this
    If your Internet Service Providor is DSL follow this
    To change the Wireless Settings click here and Enable Wireless Security
    Now see if you can locate your wireless network on your wireless computer and attempt to connect...

  • Able to backup to Time Capsule - unable to access internet

    I have the following devices that need to connect to the internet using the Time Capsule:
    1) iMAC purchased in 4/09 - need to access internet wirelessly;
    2) MacBook Pro - 5 years ago; and - need to access internet wirelessly;
    3) Lenovo laptop with Windows XP - work assigned laptop - need to access by ethernet, tunnel into work with iPass.
    4) Apple TV -just connected today - am able to get my music, but haven't been able to access iTunes store.
    My cable modem is a Motorola. If the model # is important, I can get it, I'm just too tired right now.
    I installed the Time Capsule this morning, was able to configure it to my iMac and back it up; then was able to connect to the internet until I tried to set up the MacBook Pro. During that configuration Airport Utility diagnostics instructed me to disconnect the modem and I lost connection with the iMac and never was able to get a connection with my MacBook Pro. I don't even want to think about the Lenovo laptop until I get the MAC's worked out.
    I have no spaces or dashes in the names of my MacBook, iMac, Time Capsule or Apple TV, I've been at this for over 14 hours and I'm exhausted.
    My cable modem connects to the Time Machine WAN port; and I have a cable connected from a Time Capsule ethernet port directly to my Lenox laptop.
    I have not tried to connect my Linksys wireless router to the Time Capsule.
    I had to disconnect the Time Capsule and reconnect my Linksys router to get back on the internet to read all the discussions which are not helping me.
    HELP!

    This issue has been resolved...talk to someone at Apple and we had to unplug the broadband coax cable and finally got it up and running.

  • ASA 5505 Anyconnect VPN Users can't access Internet

    Vpn user cannot access the internet but able to ping the lan network (192.168.1.0).. it seem like im missing a lan or nat rule.. Possibly allowing the vpn subnet 192.168.2.0 /24 to pass through to the internet.  Im looking to accomplish this without split tunneling.. Thanks

    on 8.2.5 version or lower:  Let say your inside hosts are accessing Internet by using dynamic nat index "1" and now you can use the same nat index "1" allow your vpn-pool range to be part of the same dynamic-nat index "1" to access the Internet.  Note I am natting source interface is be outside for vpn-client users because they (vpn-users) are physically coming off the outside interface.
    nat (outside) 1 192.168.2.0 255.255.255.0
    on 8.3 version or greater:  
    object network vpn-user-subnet
     subnet 192.168.2.0 255.255.255.0
     nat (outside,outside) dynamic interface
    Hope this helps.
    Thanks
    Rizwan Rafeek

  • Unable to access Internet from LAN - Cisco ASA 9.1(2)

    Hi,
      I have Cisco 5515 IOS 9.1(2). I had configured out-to-in rule with 'ssh' and able to access the Internet server, but the same server is unable to access the Internet. Not sure what i am missing here. Please look in to the configuration below and suggest.
    10.4.20.2 is the host i am trying to access the Internet and it fails, but able to 'ssh' to this IP from the internet.
    ASA Version 9.1(2)
    interface GigabitEthernet0/0
     description OUTSIDE
     nameif outside
     security-level 0
     ip address 1.1.1.1 255.255.255.248
    interface GigabitEthernet0/1
     description BACKUP
     nameif backup
     security-level 0
     ip address 2.2.2.2 255.255.255.248
    interface GigabitEthernet0/4
     description INSIDE
     nameif inside
     security-level 100
     ip address 10.4.20.1 255.255.255.0
    boot system disk0:/asa912-smp-k8.bin
    ftp mode passive
    clock timezone PT -8
    clock summer-time PT recurring
    dns domain-lookup outside
    object network 2.2.2.4_10.4.20.2
     host 10.4.20.2
    access-list out2in extended permit icmp any any inactive
    access-list in2out extended permit ip 10.4.20.0 255.255.255.0 any
    access-list out2in_bkp extended permit icmp any any inactive
    access-list out2in_bkp extended permit tcp any object 2.2.2.4_10.4.20.2 eq ssh
    pager lines 24
    logging enable
    logging timestamp
    logging standby
    logging monitor debugging
    logging trap debugging
    logging history debugging
    logging asdm debugging
    mtu outside 1500
    mtu backup 1500
    mtu inside 1500
    mtu management 1500
    no failover
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-713.bin
    asdm history enable
    arp timeout 14400
    no arp permit-nonconnected
    object network 2.2.2.4_10.4.20.2
     nat (inside,backup) static 2.2.2.4 net-to-net dns
    access-group out2in in interface outside
    access-group out2in_bkp in interface backup
    access-group in2out in interface inside
    route outside 0.0.0.0 0.0.0.0 1.1.1.2 10 track 100
    route backup 0.0.0.0 0.0.0.0 2.2.2.3 20 track 101
    timeout xlate 3:00:00
    timeout pat-xlate 0:00:30
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    user-identity default-domain LOCAL
    aaa authentication ssh console LOCAL
    aaa authentication http console LOCAL
    http server enable
    http 192.168.1.0 255.255.255.0 management
    http 0.0.0.0 0.0.0.0 outside
    http 0.0.0.0 0.0.0.0 backup
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
    sla monitor 100
     type echo protocol ipIcmpEcho 8.8.8.8 interface outside
    sla monitor schedule 100 life forever start-time now
    sla monitor 101
     type echo protocol ipIcmpEcho 8.8.4.4 interface backup
    sla monitor schedule 101 life forever start-time now
    service resetoutside
    crypto ipsec security-association pmtu-aging infinite
    crypto ca trustpool policy
    track 100 rtr 100 reachability
    track 101 rtr 101 reachability
    telnet timeout 5
    ssh 0.0.0.0 0.0.0.0 outside
    ssh 0.0.0.0 0.0.0.0 backup
    ssh timeout 60
    ssh version 2
    ssh key-exchange group dh-group1-sha1
    console timeout 0
    dhcpd address 192.168.1.2-192.168.1.254 management
    dhcpd enable management
    threat-detection basic-threat
    threat-detection statistics access-list
    no threat-detection statistics tcp-intercept
    ntp server 123.108.225.6 source outside
    ssl encryption rc4-sha1 aes128-sha1 aes256-sha1 3des-sha1
    username xyz password ***** encrypted privilege 15
    class-map inspection_default
     match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
     parameters
      message-length maximum client auto
      message-length maximum 512
    policy-map global_policy
     class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny
      inspect sunrpc
      inspect xdmcp
      inspect sip
      inspect netbios
      inspect tftp
      inspect ip-options
    service-policy global_policy global
    prompt hostname context
    no call-home reporting anonymous
    Cryptochecksum:9b63e3cfc9f98800d2bb3efa34c75906
    : end

    Hi Anand
    Could you please do a packet tracer on the Asa?
    Packet-tracer input inside icmp 10.20.4.2 8 0 4.2.2.2 detailed
    Are you able to ping 4.2.2.2 from the server ?
    Please use the following command
    "fixup protocol icmp"
    And then check whether you are able to ping the Internet.
    Regards
    Aditya

  • MacBook Air unable to access internet

    My MacBook Air is showing full strength on wifi but I cannot access internet.  I have also tried to connect via Ethernet cable and iPhone hotspot and the problem persists.  Please help

    Power Cycle
    Power off the router. Unplug it from the wall. Wait for few  minutes.
    Connect the router back to to the wall.
    Power the router back on. Wait  until all lights are lit properly. It will take a while.
    Restart the computer.
    Start up in Safe Mode.
    http://support.apple.com/kb/HT1455

  • VPN users unable to access internal network - ASA 8.3.1

    Hello,
    I have a base config of AnyConnect VPN below, however the ASA 8.3.1 code has deprecated some commands and the VPN/NAT/FW rule syntax is quite different. Can someone point out what's missing from the pertinent config below that prevents the VPN Pool from accessing the internal LAN?
    The Core LAN router is 1.2.3.1.
    ASA Version 8.3(1)
    interface Ethernet0/0
    nameif inside
    security-level 100
    ip address 1.2.3.2 255.255.255.0
    ip local pool anyconnect-vpn-pool 1.2.9.10-1.2.9.20 mask 255.255.255.0
    object network DataVLAN
    subnet 1.2.3.0 255.255.255.0
    object-group network Internal-Data
    network-object object DataVLAN
    nat (any,any) after-auto source dynamic Internal-Data Outside_INT
    route inside 1.2.0.0 255.255.0.0 1.2.3.1 1
    dynamic-access-policy-record DfltAccessPolicy
    webvpn
    enable outside
    svc image disk0:/anyconnect-win-2.5.2014-k9.pkg 1
    svc enable
    group-policy DfltGrpPolicy attributes
    vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
    address-pools value anyconnect-vpn-pool
    group-policy GroupPolicy1 internal
    group-policy GroupPolicy1 attributes
    address-pools value anyconnect-vpn-pool
    group-policy vpn-anyconnecct-policy internal
    group-policy vpn-anyconnecct-policy attributes
    vpn-tunnel-protocol svc webvpn
    webvpn
      url-list none
      svc ask enable
    tunnel-group vpn-users type remote-access
    tunnel-group vpn-users general-attributes
    address-pool anyconnect-vpn-pool
    default-group-policy vpn-anyconnecct-policy
    tunnel-group anyconnect2 type remote-access
    tunnel-group anyconnect2 general-attributes
    address-pool anyconnect-vpn-pool
    TIA.
    Mike

    Hi Rohan,
    Are you saying to replace "nat (any,any)" with "nat (inside,outside)"? I was wondering about this because I'd always done "nat (inside,outside)" but a colleague had performed the initial configuration which already contained "nat (any,any)" statement and I was not sure if this was just something new in 8.3.1. I also noticed the "global" command is no longer available.
    I will give this a try. Thanks.
    -Mike

  • Every time I turn on Wi-Fi on my iPhone I am then unable to access internet on my iMac.         internet. No connection. Turn Wi-Fi off on iPhone, regain connection.

    Every time I turn on Wi-Fi on my iPhone, I lose my internet connection on my iMac. Using ios5 on phone and Lion on mac.

    On your iPhone tap Settings / General / Reset / Reset Network Settings.
    Restart your iPhone, restart your iMac.

  • Wifi Connected but unable to access internet 9300

    Hello 
    I recently changed my data plan on my device but after I did so I realized my wifi connection wouldn't work. My wifi connection is fully connected (and my data is turned off) but it won't work at all. 
    Please Help
    Solved!
    Go to Solution.

    AmandaTemple wrote:
    Hello 
    My wifi connection is fully connected (and my data is turned off)
    Hi AmandaTemple
    Welcome to BlackBerry Support Forums
    On Manage Connection you can turn off your Mobile Network , But have to TURN ON  your Data Services .Can you try that and see if it allows .
    Click " Like " if you want to Thank someone.
    If Problem Resolves mark the post(s) as " Solution ", so that other can make use of it.

  • VPN client unable to access Internert via split tunneling.

    I have split tunneling configured on a PIX 515. The remote VPN client connects to the PIX fine and can ping hosts on the internal LAN, but cannot access the Internet. Am I missing something? My config as per below.
    Also, I don't see any secured routes on the VPN client via Statistics (screen shot below)
    Any advice is much appreciated.
    Rob
    PIX Version 8.0(3)
    hostname PIX-A-250
    enable password xxxxx encrypted
    names
    interface Ethernet0
    nameif outside
    security-level 0
    ip address x.x.x.250 255.255.255.240
    interface Ethernet1
    nameif inside
    security-level 100
    ip address 192.168.9.1 255.255.255.0
    passwd xxxxx encrypted
    ftp mode passive
    dns domain-lookup outside
    dns server-group Ext_DNS
    name-server 194.72.6.57
    name-server 194.73.82.242
    object-group network LOCAL_LAN
    network-object 192.168.9.0 255.255.255.0
    network-object 192.168.88.0 255.255.255.0
    object-group service Internet_Services tcp
    port-object eq www
    port-object eq domain
    port-object eq https
    port-object eq ftp
    port-object eq 8080
    port-object eq telnet
    object-group network WAN_Network
    network-object 192.168.200.0 255.255.255.0
    access-list ACLOUT extended permit udp object-group LOCAL_LAN any eq domain log
    access-list ACLOUT extended permit icmp object-group LOCAL_LAN any log
    access-list ACLOUT extended permit tcp object-group LOCAL_LAN any object-group Internet_Services log
    access-list ACLIN extended permit icmp any any echo-reply log
    access-list ACLIN extended permit icmp any any unreachable log
    access-list ACLIN extended permit icmp any any time-exceeded log
    access-list split_tunnel_list remark Local LAN
    access-list split_tunnel_list standard permit 192.168.9.0 255.255.255.0
    access-list NONAT extended permit ip object-group LOCAL_LAN 192.168.100.0 255.255.255.0
    pager lines 24
    logging enable
    mtu outside 1500
    mtu inside 1500
    ip local pool testvpn 192.168.100.1-192.168.100.99
    no failover  
    icmp unreachable rate-limit 1 burst-size 1
    no asdm history enable
    arp timeout 14400
    global (outside) 1 interface
    nat (inside) 0 access-list NONAT
    nat (inside) 1 0.0.0.0 0.0.0.0
    access-group ACLIN in interface outside
    access-group ACLOUT in interface inside
    route outside 0.0.0.0 0.0.0.0 195.171.252.45 1
    route inside 192.168.88.0 255.255.255.0 192.168.88.254 1
    route inside 192.168.199.0 255.255.255.0 192.168.199.254 1
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout uauth 0:05:00 absolute
    dynamic-access-policy-record DfltAccessPolicy
    http server enable
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec transform-set Set_1 esp-3des esp-sha-hmac
    crypto dynamic-map outside_dyn_map 10 set transform-set Set_1
    crypto dynamic-map outside_dyn_map 10 set security-association lifetime seconds 280000
    crypto dynamic-map outside_dyn_map 10 set reverse-route
    crypto map outside_map 10 ipsec-isakmp dynamic outside_dyn_map
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp policy 1
    authentication pre-share
    encryption 3des
    hash sha    
    group 2     
    lifetime 43200
    crypto isakmp policy 65535
    authentication pre-share
    encryption 3des
    hash sha    
    group 2     
    lifetime 86400
    telnet timeout 5
    ssh timeout 5
    console timeout 0
    threat-detection basic-threat
    threat-detection statistics access-list
    group-policy testvpn internal
    group-policy testvpn attributes
    vpn-tunnel-protocol IPSec
    split-tunnel-policy tunnelspecified
    username testuser password xxxxxx encrypted
    tunnel-group testvpn type remote-access
    tunnel-group testvpn general-attributes
    address-pool testvpn
    default-group-policy testvpn
    tunnel-group testvpn ipsec-attributes
    pre-shared-key *
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum 512
    policy-map global_policy
    class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect netbios
      inspect rsh
      inspect rtsp
      inspect skinny 
      inspect esmtp
      inspect sqlnet
      inspect sunrpc
      inspect tftp
      inspect sip 
      inspect xdmcp
      inspect icmp
    service-policy global_policy global
    prompt hostname context
    Cryptochecksum:5dcb5dcdff277e1765a9a0c366b88b9e
    : end
    PIX-A-250#

    Hello Jennifer,
    I can ping the 192.168.88.0/24 (host 88.3) from my PIX fine. The 88 subnet hangs off a 2950 switch. This is my diagram.
    My configs are as follows. Please note I have left out the suggested lines of config from above as they had no effect.
    Very much appreciate your time and effort with my issue.
    Many thanks,
    Rob
    PIX A
    PIX Version 8.0(3)
    hostname PIX-A-250
    enable password NBhgOL6eDYkO4RHk encrypted
    names
    interface Ethernet0
    nameif outside
    security-level 0
    ip address x.x.x.250 255.255.255.240
    interface Ethernet1
    nameif inside
    security-level 100
    ip address 192.168.9.1 255.255.255.0
    passwd k85be8tPM1XyMs encrypted
    ftp mode passive
    dns domain-lookup outside
    dns server-group Ext_DNS
    name-server 194.72.6.57
    name-server 194.73.82.242
    object-group network LOCAL_LAN
    network-object 192.168.9.0 255.255.255.0
    network-object 192.168.88.0 255.255.255.0
    object-group service Internet_Services tcp
    port-object eq www
    port-object eq domain
    port-object eq https
    port-object eq ftp
    port-object eq 8080
    port-object eq telnet
    object-group network WAN_Network
    network-object 192.168.200.0 255.255.255.0
    access-list ACLOUT extended permit udp object-group LOCAL_LAN any eq domain log
    access-list ACLOUT extended permit icmp object-group LOCAL_LAN any log
    access-list ACLOUT extended permit tcp object-group LOCAL_LAN any object-group Internet_Services log
    access-list ACLIN extended permit icmp any any echo-reply log
    access-list ACLIN extended permit icmp any any unreachable log
    access-list ACLIN extended permit icmp any any time-exceeded log
    access-list split_tunnel_list remark Local LAN
    access-list split_tunnel_list standard permit 192.168.9.0 255.255.255.0
    access-list split_tunnel_list standard permit 192.168.88.0 255.255.255.0
    access-list split_tunnel_list standard permit 192.168.200.0 255.255.255.0
    access-list NONAT extended permit ip object-group LOCAL_LAN 192.168.100.0 255.255.255.0
    pager lines 24
    logging enable
    mtu outside 1500
    mtu inside 1500
    ip local pool testvpn 192.168.100.1-192.168.100.99
    no failover  
    icmp unreachable rate-limit 1 burst-size 1
    no asdm history enable
    arp timeout 14400
    global (outside) 1 interface
    nat (inside) 0 access-list NONAT
    nat (inside) 1 0.0.0.0 0.0.0.0
    access-group ACLIN in interface outside
    access-group ACLOUT in interface inside
    route outside 0.0.0.0 0.0.0.0 x.x.252.45 1
    route inside 192.168.88.0 255.255.255.0 192.168.88.254 1
    route inside 192.168.199.0 255.255.255.0 192.168.199.254 1
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout uauth 0:05:00 absolute
    dynamic-access-policy-record DfltAccessPolicy
    http server enable
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec transform-set Set_1 esp-3des esp-sha-hmac
    crypto dynamic-map outside_dyn_map 10 set transform-set Set_1
    crypto dynamic-map outside_dyn_map 10 set security-association lifetime seconds 280000
    crypto dynamic-map outside_dyn_map 10 set reverse-route
    crypto map outside_map 10 ipsec-isakmp dynamic outside_dyn_map
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp policy 1
    authentication pre-share
    encryption 3des
    hash sha    
    group 2     
    lifetime 43200
    crypto isakmp policy 65535
    authentication pre-share
    encryption 3des
    hash sha    
    group 2     
    lifetime 86400
    telnet timeout 5
    ssh timeout 5
    console timeout 0
    threat-detection basic-threat
    threat-detection statistics access-list
    group-policy testvpn internal
    group-policy testvpn attributes
    vpn-tunnel-protocol IPSec
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value split_tunnel_list
    username robbie password mbztSskhuas90P encrypted
    tunnel-group testvpn type remote-access
    tunnel-group testvpn general-attributes
    address-pool testvpn
    default-group-policy testvpn
    tunnel-group testvpn ipsec-attributes
    pre-shared-key *
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum 512
    policy-map global_policy
    class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect netbios
      inspect rsh
      inspect rtsp
      inspect skinny 
      inspect esmtp
      inspect sqlnet
      inspect sunrpc
      inspect tftp
      inspect sip 
      inspect xdmcp
      inspect icmp
    service-policy global_policy global
    prompt hostname context
    Cryptochecksum:5dcb5dcdff277e1765a9a0c366b88b9e
    : end
    3560_GW Gateway
    test_gw01#sh run
    Building configuration...
    Current configuration : 2221 bytes
    version 12.2
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    no service password-encryption
    hostname test_gw01
    enable secret 5 $1$cOB4$UDjkhs&$FjQBe8/rc30
    no aaa new-model
    system mtu routing 1500
    ip subnet-zero
    ip routing
    no file verify auto
    spanning-tree mode pvst
    spanning-tree extend system-id
    vlan internal allocation policy ascending
    interface GigabitEthernet0/1
    interface GigabitEthernet0/2
    description uplink to Cisco_PIX
    switchport access vlan 9
    interface GigabitEthernet0/3
    interface GigabitEthernet0/4
    interface GigabitEthernet0/5
    interface GigabitEthernet0/6
    interface GigabitEthernet0/7
    interface GigabitEthernet0/8
    interface GigabitEthernet0/9
    interface GigabitEthernet0/10
    interface GigabitEthernet0/11
    interface GigabitEthernet0/12
    interface GigabitEthernet0/13
    interface GigabitEthernet0/14
    interface GigabitEthernet0/15
    interface GigabitEthernet0/16
    interface GigabitEthernet0/17
    interface GigabitEthernet0/18
    interface GigabitEthernet0/19
    interface GigabitEthernet0/20
    interface GigabitEthernet0/21
    interface GigabitEthernet0/22
    interface GigabitEthernet0/23
    switchport access vlan 88
    switchport mode access
    spanning-tree portfast
    interface GigabitEthernet0/24
    switchport access vlan 9
    switchport mode access
    spanning-tree portfast
    interface GigabitEthernet0/25
    description trunk to 2950_SW_A port 1
    switchport trunk encapsulation dot1q
    interface GigabitEthernet0/26
    interface GigabitEthernet0/27
    description trunk to A_2950_112 port 1
    switchport trunk encapsulation dot1q
    shutdown
    interface GigabitEthernet0/28
    interface Vlan1
    no ip address
    shutdown
    interface Vlan9
      ip address 192.168.9.2 255.255.255.0
    interface Vlan88
    ip address 192.168.88.254 255.255.255.0
    interface Vlan199
    ip address 192.168.199.254 255.255.255.0
    ip classless
    ip route 0.0.0.0 0.0.0.0 192.168.9.1
    ip route 192.168.88.0 255.255.255.0 192.168.9.1
    ip route 192.168.100.0 255.255.255.0 192.168.9.1
    ip route 192.168.200.0 255.255.255.0 192.168.9.1
    ip http server
    control-plane
    banner motd ^C This is a private network.^C
    line con 0
    line vty 0 4
    login
    line vty 5 15
    login   
    end      

  • IPad & iPhone 4s unable to access internet on wi-fi

    My iPad and iPhone 4s (both on iOS 6.0.1) don't seem to be able to access the internet on my home wifi network (WPA). My iPod Touch (also iOS 6.0.1) works just fine with the network. This is the first time it's happened, I've reset network settings multiple times on both devices to no avail.
    They both connect and access fine on other wifi networks.
    They automatically sign into the home network as usual but browsers and apps always time out. What's even stranger is that on my iPhone I do get pop-up notifications (from Twitter and Facebook) when the phone is on standby but once I open the notifications the request times out :-(
    No other Apple device or in the household is having an issue with the home wifi network.

    Turn off "Smart Set Up" on the homehub. It can cause problems on mobile devices.
    http://bt.custhelp.com/app/answers/detail/a_id/44328/~/switching-smart-setup-on-and-off-on-the-bt-ho...

Maybe you are looking for