[vpn-help] Windows 7 and Cisco ASA/PIX

[Dave Roberts]

Well it looks good, and works well with XP...
The situation:
32 bit XP client with Shrew 2.1.5 - works well to both PIX515 and ASA5505

32 bit Win7 with Cisco 5.0.02.0090 - works well to both PIX515 and ASA5505

32 bit Win7 with Shrew 2.1.5 - seems to set a Security Association (Network tab, Established-1) but not shown in Trace.
External DNS server replies to ping: Destination host unreachable.  Trace will not start/stop.

32 bit Win7 with Shrew 2.1.6 (all three) - never sets up Security Associations, Trace does not work at all.

64 bit Win7 with Shrew 2.1.5 - seems to set a Security Association (Network tab, Established-1) but not shown in Trace.
The virtual adapter replies to ping: Destination host unreachable.  Trace will not start/stop.

32 bit Win7 Cisco with tunnel enabled:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.91.1     192.168.91.2     20
          0.0.0.0          0.0.0.0     192.168.91.1     192.168.91.5     30
         10.1.1.0    255.255.255.0         On-link         10.1.1.17    276
        10.1.1.17  255.255.255.255         On-link         10.1.1.17    276
       10.1.1.255  255.255.255.255         On-link         10.1.1.17    276
    (Host IP)      255.255.255.255     192.168.91.1     192.168.91.2    100
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     192.168.72.0    255.255.255.0         10.1.1.1        10.1.1.17    100
     192.168.91.0    255.255.255.0         On-link      192.168.91.2    276
     192.168.91.0    255.255.255.0         On-link      192.168.91.5    281
     192.168.91.1  255.255.255.255         On-link      192.168.91.2    100
     192.168.91.2  255.255.255.255         On-link      192.168.91.2    276
     192.168.91.5  255.255.255.255         On-link      192.168.91.5    281
   192.168.91.255  255.255.255.255         On-link      192.168.91.2    276
   192.168.91.255  255.255.255.255         On-link      192.168.91.5    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.91.2    276
        224.0.0.0        240.0.0.0         On-link      192.168.91.5    281
        224.0.0.0        240.0.0.0         On-link         10.1.1.17    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.91.2    276
  255.255.255.255  255.255.255.255         On-link      192.168.91.5    281
  255.255.255.255  255.255.255.255         On-link         10.1.1.17    276


32 bit Win7 Shrew with tunnel enabled, 64 Bit Win7 is functionally identical:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.91.1     192.168.91.8     20
         10.1.1.0    255.255.255.0         On-link         10.1.1.15    286
        10.1.1.15  255.255.255.255         On-link         10.1.1.15    286
       10.1.1.255  255.255.255.255         On-link         10.1.1.15    286
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     192.168.72.0    255.255.255.0         On-link         10.1.1.15     31
   192.168.72.255  255.255.255.255         On-link         10.1.1.15    286
     192.168.91.0    255.255.255.0         On-link      192.168.91.8    276
     192.168.91.8  255.255.255.255         On-link      192.168.91.8    276
   192.168.91.255  255.255.255.255         On-link      192.168.91.8    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.91.8    276
        224.0.0.0        240.0.0.0         On-link         10.1.1.15    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.91.8    276
  255.255.255.255  255.255.255.255         On-link         10.1.1.15    286


I'm on my third day here, any guidance gratefully received!