cancel
Showing results for 
Search instead for 
Did you mean: 

network connect on sa

Highlighted
Contributor

network connect on sa

Hi,

i have a question about network connect

i confguerd sa with AD as a auth server i created a relm configure network connect with dhcp pool

and i am able to log in via browser i am getting ip address on my pc but i can't access anything

in resource policy i added *:*_ so allow all

any idea what i am missing ?

i cant ping gateway

5 REPLIES 5
Highlighted
Respected Contributor

Re: network connect on sa

What type of split tunneling are you using? Which gateway are you failing to reach? Do you have a route on your internal network to allow traffic to/from the Network Connect IP pool? What is the first hop when you do a tracert?
Highlighted
Contributor

Re: network connect on sa

so 1 hop is 10.200.200.200

i configured vlan ont switch and i can't ping management ip of that vlan

split tunneling is disebled and there is no policy

how it shoudl be configured?

Highlighted
Respected Contributor

Re: network connect on sa

OK, first hop is good.

Are you able to ping/tracert from the IVE internal interface from the admin console (Maintenance>Troubleshooting>Tools>Commands)?

Do you have a route on the internal interface to get to the VLAN (System>Network>Routes)?

Does the VLAN have a route to the Network Connect IPs through the internal port of the IVE?

Highlighted
Contributor

Re: network connect on sa

so i can ping from commands

interface Vlanx

ip address 10.10.10.254 255.255.255.0_

sh ip route 10.10.10.0
Routing entry for 10.10.10.0/24
Known via "connected", distance 0, metric 0 (connected, via interface)
Redistributing via eigrp 100
Routing Descriptor Blocks:
* directly connected, via VlanX
Route metric is 0, traffic share count is 1_

to work i geuss i need static route for 10.10.10.0 with next hop of the IVE

ip route 10.10.10.0 255.255.255.0 10.10.11.100

on IVE

i have a def route 0.0.0.0 with next ip 10.10.11.254

correct me if i am wrong

and thanks

Highlighted
Contributor

Re: network connect on sa

ok

so i don't need vlans at all just a class behind Ive and routing to it

clear