ASA 5505 VPN with NEM

kumlait2004 · ‎12-11-2007

Hi!

Im having trouble setting up two ASA5505 with EzVPN. One is head and one is client. Without NEM everything works fine. With NEM it connects but cant ping anything or use the split tunnel to access Internet. See attached configs.

With NEM enabled the Head gives the following error:

No translation group found for icmp src outside:192.168.10.2 dst inside:192.168.1.201 (type 8, code 0)

Any ideas ?

The Public IP addressesa and gateway are changed to 9's in the first three parsts of the address.

Thanks! /Bjorn

ggilbert · ‎12-11-2007

HEllo,

Add this command to the head end side.

access-list inside_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.255.0

This should fix your issue.

Rate this post if it helps.

Cheers,

Gilbert