VPN users unable to access DMZ 1

[rubbaninja]

I am using a 5540 to allow vpn users access to our network through the outside interface.
Users cannot access our webdmz interface that resided on the same device.

"ASA-3-305005: No translation group found for tcp src outside:192.168.100.15/1673 dst webdmz:10.72.1.19/80

192 being the address of the VPN client.

All traffic is tunneled

Some config info
same-security-traffic permit inter-interface
access-list inside_nat0_outbound extended permit ip any 192.168.100.0 255.255.254.0


Let me know if there is something more I should show or not. Thank You

 

[NetworkGhost]

You need a nat 0 statement applied to the DMZ interface.

access-list nonat_dmz permit ip any 192.168.100.0 255.255.254.0
nat (dmzif) 0 access-list nonat_dmz

http://www.wr-mem.com

 

[rubbaninja]

Thanks for the help. Shortly after this I figured it out and that's exactly what I did. I forgot about the "new" packet tracer feature which helped A LOT.

Thanks!

 

[NetworkGhost]

Yeah packet-tracer is great. Alot of the new commands are much more helpful.

http://www.wr-mem.com