We are using Cisco VPN client and a PIX firewall. We have users based at home connecting over the VPN.
The clients are able to obtain a private IP in the correct range (10.170.9.x), however, it seems they are obtaining the incorrect subnet-mask 255.0.0.0 when in fact, it should be 255.255.255.0. Whether this is the cause of the issue or not, remains to be confirmed.
What we do know is, connectivity is 100% reliable in one direction, from the servers on the LAN side of the PIX to the client laptops at home ? we are able to VNC both by name and IP.
The VPN is successfully established each time, and as mentioned above, VNC to the client is always possible. What is only 50% reliable is to pining the DC (on 10.170.1.x) from the client. If the machine is restarted, the client router is rebooted or the IP address is renewed, there is a 50% chance that pinging will again be possible for the duration of the session.
Any ideas?
