Re: HELP!!! ASA Anyconnect VPN subnet cannot access LAN

From: Haroon <itguy.pro_at_gmail.com>
Date: Thu, 29 May 2014 01:22:53 -0400

nevermind, I fixed the issue... asa9.2 nat will take some getting used
to!!!!

On Wed, May 28, 2014 at 9:15 PM, Haroon <itguy.pro_at_gmail.com> wrote:

>
> Hello Experts,
>
> I need some help with AnyConnect VPN I configured on ASA 5510. Please see
> diagram to better understand below details. http://tinypic.com/r/9uvfix/8
>
> The configuration, from making connection to the ASA through the vpn
> client works fine. I can connect, authenticate (to local and LDAP), get an
> ip address but once it is connected, I cannot access local resources inside
> the network (LAN).
>
> The VPN is configured on the INSIDE interface of the ASA and then 1:1 NAT
> on Meraki MX90
>
> If I use LAN's DHCP server instead of the IP POOL on the ASA, I obviously
> get the same IP addresses as the LAN and local resource access (RDP,
> fileshares, etc.) works fine.
>
> On ASA I do have splittunnel enabled, I do have a route to the IP POOL
> subnet on meraki for local servers to get to the VPN subnet and also I have
> intra/inter interface traffic.
>
> Other than the VPN there is nothing else configured on the ASA.
>
> Considering the diagram, considering the fact that its only using one
> inside interface for VPN and VPN traffic basically makes U-Turn on ASA,
> what exactly do I need to do on the ASA to allow different subnet/VPN IP
> POOL to access inside resources?
>
> Any help/direction would be greatly appreciate.
>
> thanks,
>
> Haroon
>

-- 
*Virtualization.net*
*Post Jobs, News, Forums, Tutorials*
http://www.virtualization.net
Blogs and organic groups at http://www.ccie.net
Received on Thu May 29 2014 - 01:22:53 ART

This archive was generated by hypermail 2.2.0 : Tue Jun 10 2014 - 13:43:09 ART