Solved

trouble with Cisco object-group/VPN configuration

Posted on 2014-01-16
1
558 Views
Last Modified: 2014-01-16
I have two sites connected via VPN. I restricted it so that only four IP addresses could communicate across the VPN for security purposes. The syntax I know of for the ASA's is below.

object-group network RockIsland-2
 description RockIsland-2 internal IP Range
 network-object host 192.168.6.30
 network-object host 192.168.6.32
 network-object host 192.168.6.33
 network-object host 192.168.6.31

access-list vpn2RI extended permit ip 192.168.10.0 255.255.255.0 object-group RockIsland-2
access-list nonat extended permit ip 192.168.10.0 255.255.255.0 192.168.6.0 255.255.255.0

I just added a 5th IP address to the network-object command and the new workstation works fine. A couple days later, one of the five workstations does not work. It can't connect across the VPN. I am wondering if there is a configuration change that I need to make that I didn't know about.?

Thanks,

Justin
0
Comment
Question by:JustinGSEIWI
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
JustinGSEIWI earned 0 total points
ID: 39786065
Turns out you have to add the "network-object host" command to both ASA's that are involved with the VPN connect. I added the fifth device to the remote ASA and then it started working several minutes later.

Justin
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of the companies I’ve worked with have embraced cloud solutions due to their desire to “get out of the datacenter business.” The ability to achieve better security and availability, and the speed with which they are able to deploy, is far grea…
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question