Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SSL VPN Help

Status
Not open for further replies.
bkemp84

bkemp84

IS-IT--Management
Apr 1, 2009
4
US
I am setting up a ssl vpn on a 5510, and the vpn software freezes when I try connect to the ip. Here is my config file.

version 8.0(2)
!
hostname FamFac-ASA
domain-name blank.blank.com
enable password J3Oi.B3iktJ5TMzT encrypted
names
name 192.168.14.21 FamFac-SRV2 description Main Server
!
interface Ethernet0/0
nameif Outside0
security-level 0
ip address (Public IP) 255.255.255.192
!
interface Ethernet0/1
nameif inside1
security-level 100
ip address 192.168.14.2 255.255.255.0
!
interface Ethernet0/2
nameif inside2
security-level 99
ip address 192.168.16.2 255.255.255.0
!
interface Ethernet0/3
nameif inside3
security-level 98
ip address 192.168.18.2 255.255.255.0
!
interface Management0/0
nameif management
security-level 100
ip address 192.168.12.1 255.255.255.0
management-only
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
dns server-group DefaultDNS
domain-name columbia.familyfacets.com
object-group service DM_INLINE_SERVICE_1
service-object icmp
service-object icmp echo
service-object icmp echo-reply
service-object icmp source-quench
service-object icmp time-exceeded
service-object icmp unreachable
object-group service FTPports tcp
port-object range 1024 65535
port-object eq ftp
port-object eq ftp-data
access-list Outside0_access_in extended permit object-group DM_INLINE_SERVICE_1 any any
access-list Outside0_access_in extended permit tcp any host (Public IP) eq ftp
access-list inside1_access_in extended permit ip any any
access-list inside2_access_in extended permit ip any any
access-list inside2_access_in extended permit tcp any any eq ftp
access-list Outside0_authentication extended permit ip any 192.168.14.0 255.255.255.0
access-list inside1_nat0_outbound extended permit ip host FamFac-SRV2 host 192.168.14.100
pager lines 24
logging enable
logging asdm informational
mtu Outside0 1500
mtu inside1 1500
mtu inside2 1500
mtu inside3 1500
mtu management 1500
ip local pool VPN-IP-Pool 192.168.14.100-192.168.14.200 mask 255.255.255.0
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-602.bin
no asdm history enable
arp timeout 14400
nat-control
global (Outside0) 101 interface
nat (inside1) 0 access-list inside1_nat0_outbound
nat (inside1) 101 192.168.14.0 255.255.255.0
nat (inside1) 101 0.0.0.0 0.0.0.0
nat (inside2) 101 0.0.0.0 0.0.0.0
nat (inside3) 101 0.0.0.0 0.0.0.0
static (inside1,Outside0) tcp interface ftp FamFac-SRV2 ftp netmask 255.255.255.255 dns
static (inside1,inside2) tcp (Public IP) ftp FamFac-SRV2 ftp netmask 255.255.255.255
static (inside1,inside3) tcp (Public IP) ftp FamFac-SRV2 ftp netmask 255.255.255.255
access-group Outside0_access_in in interface Outside0
access-group inside1_access_in in interface inside1
access-group inside2_access_in in interface inside2
route Outside0 0.0.0.0 0.0.0.0 216.106.93.193 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
aaa authentication match Outside0_authentication Outside0 LOCAL
http server enable
http 192.168.12.0 255.255.255.0 management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ca trustpoint ASDM_TrustPoint0
enrollment self
fqdn Columbia.familyfacets.com
subject-name CN=columbia.familyfacets.com
ip-address (Public IP)
keypair FamFacVPNKeyPair
no client-types
crl configure
crypto ca certificate chain ASDM_TrustPoint0
certificate 31
3082024a 308201b3 a0030201 02020131 300d0609 2a864886 f70d0101 04050030
6b312230 20060355 04031319 636f6c75 6d626961 2e66616d 696c7966 61636574
732e636f 6d314530 1b06092a 864886f7 0d010908 130e3231 362e3130 362e3933
2e313939 30260609 2a864886 f70d0109 02161943 6f6c756d 6269612e 66616d69
6c796661 63657473 2e636f6d 301e170d 30393034 30313133 30323037 5a170d31
39303333 30313330 3230375a 306b3122 30200603 55040313 19636f6c 756d6269
612e6661 6d696c79 66616365 74732e63 6f6d3145 301b0609 2a864886 f70d0109
08130e32 31362e31 30362e39 332e3139 39302606 092a8648 86f70d01 09021619
436f6c75 6d626961 2e66616d 696c7966 61636574 732e636f 6d30819f 300d0609
2a864886 f70d0101 01050003 818d0030 81890281 8100a724 a3096a2f 47653b78
7f2dd85d 70cf35b2 acbb5150 60168fac 3ec9fdf7 540ab4a2 7f9053c3 99da8b4a
dd7f8042 d3557c6f 0988409a 24e3523c 5d868f4c f3d55d10 ba061ec3 52434309
8fd3f3d2 c4589f74 5b0c1f25 c473345f a12ca037 fe6a65b1 aaa90915 106b7bfd
430566e1 3701a5a5 edb66ce5 665412ad f5579c15 0a2d0203 01000130 0d06092a
864886f7 0d010104 05000381 8100925e 39a7ada7 ea44511b e2760ab0 e2374622
713e87ff 4332c474 4b022a98 f8627f2b 861d42dd 01668208 a24c42b2 e7e4a606
0c851d07 f146bf2e 24e6cdcb 73ecad41 3cae94b0 f0cf7980 0ec1e736 21331163
a3d8dc56 1c6e8146 79547acc 4a8fca7b 413fbe76 6d9ea955 ecf1e2d8 d42ca7ac
320798c5 148da3a7 0aedff4a fc6f
quit
no crypto isakmp nat-traversal
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 192.168.16.234-192.168.16.253 inside2
dhcpd dns 216.106.1.2 216.106.1.3 interface inside2
dhcpd enable inside2
!
dhcpd address 192.168.12.2-192.168.12.254 management
dhcpd enable management
!
threat-detection basic-threat
threat-detection statistics
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ftp strict
!
service-policy global_policy global
ssl encryption 3des-sha1 rc4-sha1 aes128-sha1 aes256-sha1
ssl trust-point ASDM_TrustPoint0 Outside0
webvpn
enable Outside0
svc image disk0:/anyconnect-win-2.1.0148-k9.pkg 1
svc enable
group-policy VPNGroup internal
group-policy VPNGroup attributes
vpn-tunnel-protocol svc webvpn
webvpn
url-list none
svc ask enable
username ssGAMBIC7 password k2UERKSffpaI8lJe encrypted privilege 0
username ssGAMBIC7 attributes
vpn-group-policy VPNGroup
username ssHILLRUX password tbLRgDw5MbUmY7t9 encrypted privilege 0
username ssHILLRUX attributes
vpn-group-policy VPNGroup
username ssSILVIRS password q5aBYH.t6GHnrEXs encrypted privilege 0
username ssSILVIRS attributes
vpn-group-policy VPNGroup
username ssMALAGEM password FoGeqDI04XOwlO9g encrypted privilege 0
username ssMALAGEM attributes
vpn-group-policy VPNGroup
username ssBAILOZC password VjNdeMNpW6Si.uxy encrypted privilege 0
username ssBAILOZC attributes
vpn-group-policy VPNGroup
username ssWIBB8JV password BOA8a5.BqQTGovHW encrypted privilege 0
username ssWIBB8JV attributes
vpn-group-policy VPNGroup
username ssHEPNOYZ password YkVhagndjRQJb6rl encrypted privilege 0
username ssHEPNOYZ attributes
vpn-group-policy VPNGroup
username ssJENKPLH password YISBJbrg9/Odz3PU encrypted privilege 0
username ssJENKPLH attributes
vpn-group-policy VPNGroup
username ssBERGPEQ password se/ZsAqRb4ZG2vYN encrypted privilege 0
username ssBERGPEQ attributes
vpn-group-policy VPNGroup
username ssCHATZ30 password Ge2NTDz8.vIRe2iS encrypted privilege 0
username ssCHATZ30 attributes
vpn-group-policy VPNGroup
username ssBOTHOZA password M9F0R2SWq.k6U/hQ encrypted privilege 0
username ssBOTHOZA attributes
vpn-group-policy VPNGroup
username ssROYEPIF password W3PyAMFTYwEJSm1C encrypted privilege 0
username ssROYEPIF attributes
vpn-group-policy VPNGroup
username ssMOONPLI password 7AkEZv3EYFS.kgL/ encrypted privilege 0
username ssMOONPLI attributes
vpn-group-policy VPNGroup
username ssCRAWAIG password JYfpeJazXahodEsm encrypted privilege 0
username ssCRAWAIG attributes
vpn-group-policy VPNGroup
username ssDORSPKQ password QSIaLGF/1jCd67Wl encrypted privilege 0
username ssDORSPKQ attributes
vpn-group-policy VPNGroup
username ssREAMPIG password LYx9lbEp3EUIKZ7R encrypted privilege 0
username ssREAMPIG attributes
vpn-group-policy VPNGroup
username ssGABRPEB password XF43tJQ8CDBWkdgi encrypted privilege 0
username ssGABRPEB attributes
vpn-group-policy VPNGroup
username ssGRIFPKR password YXZjiyx7W4qf.Pj3 encrypted privilege 0
username ssGRIFPKR attributes
vpn-group-policy VPNGroup
username ssEILAPES password BQ0uzcNChPrt5/A5 encrypted privilege 0
username ssEILAPES attributes
vpn-group-policy VPNGroup
username ssBERNUUT password 0.wtZxDny6y5gJSa encrypted privilege 0
username ssBERNUUT attributes
vpn-group-policy VPNGroup
username ssMOONQBK password xd7jUOtcWfjN1qey encrypted privilege 0
username ssMOONQBK attributes
vpn-group-policy VPNGroup
username ssJOHNQBL password 2/LpIKA/UwygDdqv encrypted privilege 0
username ssJOHNQBL attributes
vpn-group-policy VPNGroup
username ssMULIPLJ password 7wHWCtvee337OA0C encrypted privilege 0
username ssMULIPLJ attributes
vpn-group-policy VPNGroup
username ssSMITPHK password SV9hZ0IQZDVVZ00W encrypted privilege 0
username ssSMITPHK attributes
vpn-group-policy VPNGroup
username ssMILLPIE password EfuRDwejCvPlzWX9 encrypted privilege 0
username ssMILLPIE attributes
vpn-group-policy VPNGroup
username ssDAVIGEM password y.VIL4uTqKPnQIiQ encrypted privilege 0
username ssDAVIGEM attributes
vpn-group-policy VPNGroup
username ssHUDSCRQ password qwOHpNNiB917Xx7/ encrypted privilege 0
username ssHUDSCRQ attributes
vpn-group-policy VPNGroup
username ssMARKIRT password xfeTFn.GjmvlWuhT encrypted privilege 0
username ssMARKIRT attributes
vpn-group-policy VPNGroup
username ssMCCLPED password 3w87VCHNls5B0bjL encrypted privilege 0
username ssMCCLPED attributes
vpn-group-policy VPNGroup
username ssSHAFQBJ password aSCrWNKOlEDByEzw encrypted privilege 0
username ssSHAFQBJ attributes
vpn-group-policy VPNGroup
username ssBILLPEK password 8wg6/V9Ij2IJBRfD encrypted privilege 0
username ssBILLPEK attributes
vpn-group-policy VPNGroup
username ssSNELPIJ password E5c./ckPLdalx43C encrypted privilege 0
username ssSNELPIJ attributes
vpn-group-policy VPNGroup
username ssTROTGEM password vxZWvIZbQyhI01Hz encrypted privilege 0
username ssTROTGEM attributes
vpn-group-policy VPNGroup
username ssWESTRVM password uAUXdNSGYmLYzmOq encrypted privilege 0
username ssWESTRVM attributes
vpn-group-policy VPNGroup
username ssCOTTPII password wrTXlaC2iyuzTljH encrypted privilege 0
username ssCOTTPII attributes
vpn-group-policy VPNGroup
username ssWERKGEM password oIhJe8oTkymzWy/U encrypted privilege 0
username ssWERKGEM attributes
vpn-group-policy VPNGroup
username ssHOWEOZB password Fe03ZRUw50irpvAn encrypted privilege 0
username ssHOWEOZB attributes
vpn-group-policy VPNGroup
username ssFOSTGEM password qu9WSHfqEAJNnBwu encrypted privilege 0
username ssFOSTGEM attributes
vpn-group-policy VPNGroup
username ssSEYEPIH password DrfQDkFCEfNmw8vC encrypted privilege 0
username ssSEYEPIH attributes
vpn-group-policy VPNGroup
username ssCOOPY4H password AyD8yWF/.zOQl3Tp encrypted privilege 0
username ssCOOPY4H attributes
vpn-group-policy VPNGroup
username ssBURN84N password FciUzzgTQzNw02uL encrypted privilege 0
username ssBURN84N attributes
vpn-group-policy VPNGroup
username ssKRANSCG password QUALiU0aX.O3RNrt encrypted privilege 0
username ssKRANSCG attributes
vpn-group-policy VPNGroup
username ssADAMOYM password yFfEuyeD5.DegeZb encrypted privilege 0
username ssADAMOYM attributes
vpn-group-policy VPNGroup
username ssPROGGEM password EvPWrqa8A0bBXIEl encrypted privilege 0
username ssPROGGEM attributes
vpn-group-policy VPNGroup
username ssPHILGEM password 9AEwob52u1J8YsIX encrypted privilege 0
username ssPHILGEM attributes
vpn-group-policy VPNGroup
username ssSEARZ8M password RwaKv8Kmi.L/d3ZG encrypted privilege 0
username ssSEARZ8M attributes
vpn-group-policy VPNGroup
username ssCORBGEM password YsAeM9PjBYnyFsim encrypted privilege 0
username ssCORBGEM attributes
vpn-group-policy VPNGroup
username ssWILS9NY password g4HG7RuQ2sb8woW4 encrypted privilege 0
username ssWILS9NY attributes
vpn-group-policy VPNGroup
username ssSELMGEM password HtR5bDnP5p2C5hEg encrypted privilege 0
username ssSELMGEM attributes
vpn-group-policy VPNGroup
username ssCOXEGEM password aLRYBzEr.iuEmCmL encrypted privilege 0
username ssCOXEGEM attributes
vpn-group-policy VPNGroup
username ssSELPGEM password 44oiRxz5eFkMFM5k encrypted privilege 0
username ssSELPGEM attributes
vpn-group-policy VPNGroup
username ssMCCLPVS password Ce7JTphDlHQXfZBm encrypted privilege 0
username ssMCCLPVS attributes
vpn-group-policy VPNGroup
username ssCARRPEL password h0xybUrjKvjwlY.I encrypted privilege 0
username ssCARRPEL attributes
vpn-group-policy VPNGroup
username ssBOONGEM password 8weCufH52gq3LzVx encrypted privilege 0
username ssBOONGEM attributes
vpn-group-policy VPNGroup
username ssBILLGEM password TJ7DPBD8dcHihMkH encrypted privilege 0
username ssBILLGEM attributes
vpn-group-policy VPNGroup
username ssBOUNGEM password kk/qULZmJWLbL4C2 encrypted privilege 0
username ssBOUNGEM attributes
vpn-group-policy VPNGroup
username Sheila password 14CynOQy8lNvlDbR encrypted privilege 0
username Sheila attributes
vpn-group-policy VPNGroup
username Rick password oERpnDPI0Mx/8as1 encrypted privilege 0
username Rick attributes
vpn-group-policy VPNGroup
username Larry password hxPjyh.F.BQ7R2cn encrypted privilege 0
username Larry attributes
vpn-group-policy VPNGroup
tunnel-group FamFacVPN type remote-access
tunnel-group FamFacVPN general-attributes
address-pool VPN-IP-Pool
default-group-policy VPNGroup
prompt hostname context
Cryptochecksum:6ea480f44bc7924b60e6c9bdde7e677e
: end
asdm image disk0:/asdm-602.bin
no asdm history enable

 
Sort by date Sort by votes
thats a lot of usernames....i would not post those, they have tools online to decrypt your passwords....

anyway, are you even getting prompted for a username?
 
Upvote 0 Downvote
Well I could not get a username and password box. I did find however that I needed a NAT exemption. I am now getting an error on the anyconnect: unable to process responce from (public ip.) My new config is:

: Saved 4/6/09 1pm
:
ASA Version 8.0(2)
!
names
name 192.168.14.21 FamFac-SRV2 description Main Server
!
interface Ethernet0/0
nameif Outside0
security-level 0
ip address (public ip) 255.255.255.192
!
interface Ethernet0/1
nameif inside1
security-level 100
ip address 192.168.14.2 255.255.255.0
!
interface Ethernet0/2
nameif inside2
security-level 99
ip address 192.168.16.2 255.255.255.0
!
interface Ethernet0/3
nameif inside3
security-level 98
ip address 192.168.18.2 255.255.255.0
!
interface Management0/0
nameif management
security-level 100
ip address 192.168.12.1 255.255.255.0
management-only
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
dns server-group DefaultDNS
object-group service DM_INLINE_SERVICE_1
service-object icmp
service-object icmp echo
service-object icmp echo-reply
service-object icmp source-quench
service-object icmp time-exceeded
service-object icmp unreachable
object-group service FTPports tcp
port-object range 1024 65535
port-object eq ftp
port-object eq ftp-data
access-list Outside0_access_in extended permit object-group DM_INLINE_SERVICE_1 any any
access-list Outside0_access_in extended permit tcp any host (public ip) eq ftp
access-list Outside0_access_in extended permit tcp any any
access-list inside1_access_in extended permit ip any any
access-list inside2_access_in extended permit ip any any
access-list inside2_access_in extended permit tcp any any eq ftp
access-list Outside0_authentication extended permit ip any 192.168.14.0 255.255.255.0
access-list inside1_nat0_outbound extended permit ip host FamFac-SRV2 host 192.168.14.100
access-list no_nat extended permit ip 216.106.93.0 255.255.255.192 192.168.14.0 255.255.255.0
no pager
logging enable
logging asdm errors
mtu Outside0 1500
mtu inside1 1500
mtu inside2 1500
mtu inside3 1500
mtu management 1500
ip local pool VPN-IP-Pool 192.168.14.100-192.168.14.200 mask 255.255.255.0
no failover
icmp unreachable rate-limit 1 burst-size 1
icmp permit any Outside0
asdm image disk0:/asdm-602.bin
no asdm history enable
arp timeout 14400
nat-control
global (Outside0) 101 interface
nat (inside1) 0 access-list no_nat
nat (inside1) 101 192.168.14.0 255.255.255.0
nat (inside1) 101 0.0.0.0 0.0.0.0
nat (inside2) 101 0.0.0.0 0.0.0.0
nat (inside3) 101 0.0.0.0 0.0.0.0
static (inside1,Outside0) tcp interface ftp FamFac-SRV2 ftp netmask 255.255.255.255 dns
static (inside1,inside2) tcp (public ip) ftp FamFac-SRV2 ftp netmask 255.255.255.255
static (inside1,inside3) tcp (public ip) ftp FamFac-SRV2 ftp netmask 255.255.255.255
access-group Outside0_access_in in interface Outside0
access-group inside1_access_in in interface inside1
access-group inside2_access_in in interface inside2
route Outside0 0.0.0.0 0.0.0.0 216.106.93.193 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
webvpn
svc ask enable default svc
aaa authentication match Outside0_authentication Outside0 LOCAL
http server enable
http 192.168.14.0 255.255.255.0 inside1
http 192.168.12.0 255.255.255.0 management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
no vpn-addr-assign aaa
no vpn-addr-assign dhcp
telnet timeout 5
ssh 216.106.93.0 255.255.255.0 Outside0
ssh timeout 5
console timeout 0
dhcpd address 192.168.16.234-192.168.16.253 inside2
dhcpd dns 216.106.1.2 216.106.1.3 interface inside2
dhcpd enable inside2
!
dhcpd address 192.168.12.2-192.168.12.254 management
dhcpd enable management
!
threat-detection basic-threat
threat-detection statistics
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ftp
!
service-policy global_policy global
ssl encryption 3des-sha1 aes128-sha1 aes256-sha1 rc4-md5 des-sha1 rc4-sha1
ssl trust-point ASDM_TrustPoint0 Outside0
webvpn
enable Outside0
svc image disk0:/anyconnect-win-2.1.0148-k9.pkg 1
svc enable
tunnel-group-list enable
certificate-group-map DefaultCertificateMap 10 SSLClient
group-policy DfltGrpPolicy attributes
group-policy GroupPolicy1 internal
group-policy GroupPolicy1 attributes
dns-server value 192.168.14.21
vpn-tunnel-protocol IPSec l2tp-ipsec svc
split-tunnel-network-list value inside1_nat0_outbound
default-domain value columbia.familyfacets.com
address-pools value VPN-IP-Pool
webvpn
svc keep-installer installed
svc rekey time 30
svc rekey method ssl
svc ask enable default webvpn
tunnel-group DefaultWEBVPNGroup general-attributes
address-pool VPN-IP-Pool
default-group-policy GroupPolicy1
tunnel-group SSLClient type remote-access
tunnel-group SSLClient general-attributes
address-pool VPN-IP-Pool
authentication-server-group (Outside0) LOCAL
authorization-server-group LOCAL
default-group-policy GroupPolicy1
authorization-required
tunnel-group SSLClient webvpn-attributes
hic-fail-group-policy GroupPolicy1
group-alias FamFac-VPN enable
tunnel-group SSLClient ipsec-attributes
trust-point ASDM_TrustPoint0
prompt hostname context
Cryptochecksum:6ea480f44bc7924b60e6c9bdde7e677e
: end
asdm image disk0:/asdm-602.bin
no asdm history enable

 
Upvote 0 Downvote
I get this on my log when I try logging in using anyconnect.

2 Apr 06 2009 09:30:37 106001 216.145.152.169 216.106.93.199 Inbound TCP connection denied from 216.145.152.169/50376 to 216.106.93.199/443 flags SYN on interface Outside0
 
Upvote 0 Downvote
Don´t put your vpn-pool on the same subnet as your local lan. Chose a different subnet for the vpn-pool.


Your nat exempt looks weird. It should be something like this

access-list no_nat extended permit ip "local lan" "vpn pool"
 
Upvote 0 Downvote
It doesn't like the "vpn pool" part of the command
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

Sameer258
  • Locked
  • Question
Need Help to Find ip and mac address with email who one open my email
Replies
0
Views
266
Sameer258
Sameer258
Shmid
  • Locked
  • Question
Restricting Sonicwall SSL-VPN users for WAN access
Replies
7
Views
349
Shmid
Shmid
intel233
  • Locked
  • Question
ASA5510 - SSL Cert
Replies
0
Views
196
intel233
intel233
intel233
  • Locked
  • Question
Cisco ASA - VPN Question
Replies
6
Views
280
intel233
intel233
ISDPCMAN
  • Locked
  • Question
RDP fails over VPN
Replies
1
Views
121
gkittelson
gkittelson

Part and Inventory Search

Sponsor

Back
Top