cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
361
Views
0
Helpful
3
Replies

ASA5505 Remote VPN no access

mlucas1911
Level 4
Level 4

I setup VPN using the wizard and I can connect but I can't get to internal resources. I'm not sure if I need to add a route somewhere but I'm sure this is an easy one but I don't usually focus on Security.

3 Replies 3

mlucas1911
Level 4
Level 4

BTW -- Here's the config

khary
Level 1
Level 1

The biggest problem I see from a glance, you should put your VPNPool in another subnet besides the inside network (192.168.1.0/24).

Also, your interface WirelessGuestLAN should be lower security level besides 100 (which is the same as your inside interface)

example:

ip local pool VPNPool 10.1.1.1-10.1.1.31 mask 255.255.255.224

!

access-list Inside_nat0_outbound extended permit ip any 10.1.1.0 255.255.255.224

!

access-list HPMVPN_splitTunnelAcl extended permit ip any 10.1.1.0 255.255.255.224

!

no access-list HPMVPN_splitTunnelAcl standard permit any

Thanks for the response Khary, I'll let you know how it goes.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: