cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
419
Views
0
Helpful
1
Replies

RA VPN Error

Leo_Stobbe
Level 1
Level 1

Hi Gents,

I have configured 2xRA VPN connections.

ip local pool inside_pool 10.10.105.1-10.10.105.254 mask 255.255.255.0

ip local pool dmz_pool 10.10.104.1-10.10.104.254 mask 255.255.255.0

I have acl restrictions for both pool. Inside_pool has access to inside network:

for instance 10.20.1.0/24

It is working fine.

DMZ_pool has access to dmz servers.

But it doesn't work.

I can manage connecting by RA VPN(dmz_pool). But i can't reach the servers in DMZ. I saw in logs that "no translation group found for outside ip 10.10.104.1 "

Is it normal that ASA asking me about NAT configuration for OUTSIDE?

I do the same for inside_pool, except that access goes to inside interface,not to dmz interface.It is working fine without any nat translation requirements.

Any comments will be appreciated.

Leo

1 Reply 1

mfreijser
Level 1
Level 1

A nonat access-list from the DMZ to the OUTSIDE should do the trick:

----------------------------------------------

access-list nonat_dmz permit ip 10.10.104.0 255.255.255.0

nat (dmz) 0 access-list nonat_dmz

----------------------------------------------

Note that this will no affect any statics already created for the DMZ-subnet!

Please rate if the post helps!

Regards,

Michael

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: