ASK about SSL VPN Client ASA 5540

icalvocisco · ‎01-25-2008

I have configurated the SSL VPN Client Tunneling, and I can to connect with the ASA in a properly way, and the IP pool created by that asign a correct Ip of my intranet LAN network but I can't do contact with the LAN network, for example ,send a ping a some hots of the LAN and don't answer ,Somebody Know if I must config a ACL or NAT in some interface????

or what can I do??

I hope somebody can answer me..

Thanks.

Ignacio Calvo

owillins · ‎01-31-2008

Make sure you confiugred proper ACL and proper subnet range in your device.

pszczola1 · ‎01-31-2008

Make sure that your IP pool for VPN connections is not translated

example:

let say you have local pool 10.0.2.32 - 10.0.2.63

access-list nonat extended permit ip any 10.0.2.32 255.255.255.224

or

access-list nonat extended permit ip (LAN subnet ) 10.0.2.32 255.255.255.224

nat (inside) 0 access-list nonat