Solved

trouble with Cisco object-group/VPN configuration

Posted on 2014-01-16
1
546 Views
Last Modified: 2014-01-16
I have two sites connected via VPN. I restricted it so that only four IP addresses could communicate across the VPN for security purposes. The syntax I know of for the ASA's is below.

object-group network RockIsland-2
 description RockIsland-2 internal IP Range
 network-object host 192.168.6.30
 network-object host 192.168.6.32
 network-object host 192.168.6.33
 network-object host 192.168.6.31

access-list vpn2RI extended permit ip 192.168.10.0 255.255.255.0 object-group RockIsland-2
access-list nonat extended permit ip 192.168.10.0 255.255.255.0 192.168.6.0 255.255.255.0

I just added a 5th IP address to the network-object command and the new workstation works fine. A couple days later, one of the five workstations does not work. It can't connect across the VPN. I am wondering if there is a configuration change that I need to make that I didn't know about.?

Thanks,

Justin
0
Comment
Question by:JustinGSEIWI
1 Comment
 

Accepted Solution

by:
JustinGSEIWI earned 0 total points
ID: 39786065
Turns out you have to add the "network-object host" command to both ASA's that are involved with the VPN connect. I added the fifth device to the remote ASA and then it started working several minutes later.

Justin
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Cisco switch SVI 17 41
Extending  a subnet 9 37
cisco switch stacking 6 34
ipsec tunnel comme not up 10 25
This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now