VPN from internal network to ASA

[wngwngwng]

I've setup the internal interface of our ASA to be able to use IPSec. I am able to IPSec VPN to it just fine, but I cannot get anywhere once I am connected.

The same-security-traffic permit intra-interface is set. Am I forgetting something or going about it the wrong way? Any help or suggestions would be appreciated. If you have sample config that would help.

We would like our DB administrators to be able to VPN to the ASA while on the internal network so they can administer specific systems behind a firewall. The admins are spread across our campus and will need to support these systems from where ever they are at. I know we could use DHCP reserverations, but with the VPN we can set a static pool for them. Hope that makes sense.

 

[tpulley]

I can't imagine why you would do it this way but... If you get connected to the vpn and cannot touch the addresses in that range you most likely have an acl problem. Without a config its anyones guess.