Under user profile, dial-in Select Allow for network access

And under the client VPN profile, allow the other options on the bottom of the security tab