CiscoForums.it

I can't ping the pc that I use to connect to the enterprise vpn from the internal server of the enterprise.

Does anybody knows if it is possible?

this is the configuration

crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map outside_map 20 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp nat-traversal 20
crypto isakmp ipsec-over-tcp port 10000

group-policy xxx-GROUPPOLICY attributes
dns-server value xx.xx.xx.xx xx.xx.xx.xx
vpn-tunnel-protocol IPSec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value split-tunnel
default-domain value xxxxxx.it
vpn-filter value xxx-FILTER

tunnel-group xxx-TUNNELGROUP type ipsec-ra
tunnel-group xxx-TUNNELGROUP general-attributes
authentication-server-group Radius
default-group-policy xxx-GROUPPOLICY
tunnel-group xxx-TUNNELGROUP ipsec-attributes
pre-shared-key *

Thanks.