Solved

Setting up Cisco ASA 5510 for SSL VPN woes

Posted on 2011-03-14
4
430 Views
Last Modified: 2012-05-11
I have gone through the steps provided by Cisco to setup an SSL VPN for use with the Any Connect client. The VPN connection establishes fine and the client receives the correct IP address, however it cannot ping or reach any of the clients on the network. Is there a step I may had forgotten?

Steps I followed: http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008071c428.shtml
0
Comment
Question by:ICG
  • 2
4 Comments
 
LVL 18

Expert Comment

by:jmeggers
Comment Utility
What version of code are you running on the ASA?  It's most likely a NAT issue.
0
 
LVL 1

Author Comment

by:ICG
Comment Utility
I was assuming it was a NAT or ACL issue as well. It's ASA version 8.2.4.
0
 
LVL 1

Author Comment

by:ICG
Comment Utility
I believe I am lacking the NAT exemption rules. Our address pool is 192.168.10.0 /24. The address pool assigned to the vpn clients is 192.168.10.30-35. How should the exemption rule look?
0
 
LVL 9

Accepted Solution

by:
gavving earned 500 total points
Comment Utility
Check to see if you have a 'nat (inside) 0 access-list blahblah' command.  If you have an access-list blahblah then add my entry below to it.  Otherwise add both entries.

access-list nonat permit ip 192.168.10.0 255.255.255.0 192.168.10.0 255.255.255.0
nat (inside) 0 access-list nonat

0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Join & Write a Comment

Suggested Solutions

I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now