You need to activate split tunneling.
Cheers,
Chris
----- UrsprÃngliche Nachricht -----
Von: "Imran Imtiaz" <imran@thelakecity.com.pk>
An: "firewalls@securityfocus.com" <firewalls@securityfocus.com>
Gesendet: 31.05.06 20:06
Betreff: internet does not work while connected to vpn server
why i can't browse the internet while i am connected to my vpn server (pix
501 (6.3)) ?
following is the configuration of my pix 501 firewall acting as a vpn
serverpixfirewall(config)# show vpdn group
vpdn group PPTP-VPDN-GROUP accept dialin pptp
vpdn group PPTP-VPDN-GROUP ppp authentication pap
vpdn group PPTP-VPDN-GROUP ppp authentication chap
vpdn group PPTP-VPDN-GROUP ppp authentication mschap
vpdn group PPTP-VPDN-GROUP ppp encryption mppe auto
vpdn group PPTP-VPDN-GROUP client configuration address local mypool
vpdn group PPTP-VPDN-GROUP client configuration dns proxy-server
202.59.90.17
vpdn group PPTP-VPDN-GROUP pptp echo 60
vpdn group PPTP-VPDN-GROUP client authentication local
pixfirewall(config)# show access-list
access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 256)
alert-interval 300
access-list acl_out; 3 elements
access-list acl_out line 1 permit tcp any any (hitcnt=7993)
access-list acl_out line 2 permit udp any any (hitcnt=3242)
access-list acl_out line 3 permit icmp any any (hitcnt=2983)
access-list acl_in; 3 elements
access-list acl_in line 1 permit tcp any any (hitcnt=46965)
access-list acl_in line 2 permit udp any any (hitcnt=53319)
access-list acl_in line 3 permit icmp any any (hitcnt=3529)
access-list inside_outbound_nat0_acl; 1 elements
access-list inside_outbound_nat0_acl line 1 permit ip any 192.168.0.240
255.255.255.240 (hitcnt=3530)
