07-09-2007 05:48 AM - edited 02-21-2020 01:35 AM
I have several ASA-5500-series devices deployed to our various locations. Remote users VPN in to our main office's ASA-5510, but recently they've needed access to the network resources that are available on the site-to-site VPNs. However, remote users are not able to access anything on the site-to-site VPNs, and I'm sure there's some reconfiguration I need to do before it's possible. However, all my attempts thus far have been unsuccessful. Is this possible, and if so, what do I need to reconfigure to make this work? Thanks!
Solved! Go to Solution.
07-09-2007 06:24 AM
Yes this is possible.
You need to...
1. enable "same-security-traffic permit intra-interface"
2. Add the traffic from the vpn client subnet to the interesting traffic for the lan2lan tunnel on the local and remote firewalls.
3. If using split tunneling, ensure the remote network you require access to is being tunneled.
This may also help...
Please rate helpful posts.
07-09-2007 06:24 AM
Hi
You need to to do 2 things
1) Add your vpn client addresses to the crypto access-lists for the site-to-site VPN tunnels. You will need to do this on both ends of the VPN tunnel. Also if you have nat exemptions for these addresses you will need to add to that as well.
2) Assuming your traffic for the site-to-site VPN's and remote access vpn's comes in on the same interface you will need to enable hairpinning on your ASA ie, traffic can go back out the same interface it was received on. Use the following command
same-security-traffic permit intra-interface
HTH
Jon
07-09-2007 06:24 AM
Yes this is possible.
You need to...
1. enable "same-security-traffic permit intra-interface"
2. Add the traffic from the vpn client subnet to the interesting traffic for the lan2lan tunnel on the local and remote firewalls.
3. If using split tunneling, ensure the remote network you require access to is being tunneled.
This may also help...
Please rate helpful posts.
07-10-2007 09:36 PM
Good to see two stars replying almost instantly!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide