vpn tunnel only works for 1 of 2 workstations

Server 2008
VPN tunnel with a Cisco ASA 5500 on each end

At the remote location there are two workstations, each of them plugged into the Cisco ASA 5500. Workstation1 works fine. Workstation2 can't see the server or anything on the  other side of the tunnel. Workstation2 can't ping the server or websites on the internet. Workstation 2 can, however, ping itself and Workstation1. Workstation2 CAN browse the internet.

Thanks for any help.
carlosabAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Netman66Commented:
Is workstation 2 in the vpn network object in that site?

In order to be allowed through an ASA, you need to be included in access lists and/or policies (service or global) to be able to do anything.

I'm just guessing, but you should check the firewall policies to ensure that workstation 2 is in all the same groups as workstation 1.
0
Netman66Commented:
Oh, you may also need to check that the physical port that workstation 2 is connected to is configured the same as the port workstation 1 is attached to.

You can even prevent access by ports as well as users or IP addresses.

ASA is very granular and because of this it's easy to misconfigure it.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ffleismaSenior Network EngineerCommented:
based from your information both workstations are directly connected to the firewall, is the correct assumption?

if you could provide the current configuration for both sites, we might be able to drill down the exact configuration you need to apply.

also, just a question, why are the two workstation directly connected to the firewall? (if this assumption is correct) if possible it might be better to have host connected to a switch which then connects to the firewall
0
carlosabAuthor Commented:
Yes - changing the port that workstation 2 was connected to fixed the problem. Thank you.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.