ASA Hairpinning

Ericunicast · ‎11-26-2007

Does anyone know how I can setup a client vpn group to be able to terminate at an ASA and still have Internet and the ability to traverse other VPN connected sites (Hardware VPN)?

Thanks

timkaye · ‎11-26-2007

Hello.

to allow traffic to enter and exit the same interface, use the same-security-traffic command in global configuration mode.

same-security-traffic permit intra-interface.

As long as you configure the ASA and the other VPN site routers to permit traffic for the client VPN address range this will work.

Tim