Client VPN only partial LAN access

[IanMartin]

New MX user here:

I've just replaced an ASA 5510 with an MX device which is going fine so far, apart from the Client VPN

I can connect to the VPN and can ping the MX LAN IP I can also ping 

192.168.100.31

192.168.100.48

(In fact i can't ping anything else on the network at all!)

But i can't ping

192.168.100.34

192.168.100.47

Any ideas.

Thanks

Ian

[BrandonS · Accepted solution]

Default gateway on the devices you can't ping maybe is not the MX?

You need a return route from the devices you are trying to ping and that is my best guess why it may work on some and not others.  It could also be a software firewall denying ping if thee are Windows workstations, for example.

[IanMartin]

I had checked firewalls but missed the default gateway!

We have two internet links and the PCs with the MX as their DG were the only ones i could ping.

Everything else is still on our primary link on an old ASA 5510.

Thanks

Ian

[PhilipDAth]

I agree with @BrandonS.

I would compared the TCP/IP settings on a machine on your LAN that you can ping to one that you can not.  There will probably be a difference.

My second guess is Windows Firewall is blocking it.