Re: Question: Remote Access VPN with ASA 7.0

From: Alexei Monastyrnyi <alexeim73_at_gmail.com>
Date: Fri, 31 Jul 2009 21:24:37 +1000

Hi.

Could you please elaborate on "only the first one is able to access
Server-1 and others cannot" ?
Can you see two users with the same username logged in to your ASA at
the same time?

The config you posted is either omitted or incomplete. Could you please
post all relevant details, like split-tunnel ACL, NAT config, local IP
pool etc?

Cheers,
A.

Syed Khalid Ali wrote:
> Dear group memebers,
>
> Can any one help me in vpn cofiguration with ASA version 7.0. The requirement
> is that the same user should be able to login from different location
> simultaneously.
>
> Lookin through the command reference and configuration guide, I am able to
> configure resolve the simultaneous login problem but now only the first one is
> able to access Server-1 and others cannot. Anything particular that I am
> missing out!!!
>
> Below is relevant config:
>
> access-list RABRANCH_splitTunnelAcl standard permit host Server-1
>
> group-policy BRANCH internal
> group-policy BRANCH attributes
> vpn-tunnel-protocol IPSec
> ipsec-udp-port 10000
> vpn-simultaneous-logins 10
> split-tunnel-policy tunnelspecified
> split-tunnel-network-list value RABRANCH_splitTunnelAcl
>
> tunnel-group BRANCH type ipsec-ra
> tunnel-group BRANCH general-attributes
> address-pool ip-pool
> default-group-policy BRANCH
> tunnel-group BRANCH ipsec-attributes
> pre-shared-key presharedkey123
>
> username testuser password testuser+
> username testuser attributes
> vpn-group-policy BRANCH
> webvpn
>
> access-list VPN_nat0_outbound extended permit ip host Server-1 192.168.11.0
> 255.255.255.0
>
>
>
>
>
>
> _________________________________________________________________
> Drag n dropGet easy photo sharing with Windows Live Photos.
>
> http://www.microsoft.com/windows/windowslive/products/photos.aspx
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Jul 31 2009 - 21:24:37 ART

This archive was generated by hypermail 2.2.0 : Sat Aug 01 2009 - 13:10:23 ART