ASA 5505 VPN RA help

dclee · ‎04-12-2008

Trying to configure remote access via Preshared secret..VPN client connects fine, but I am unable to connect to the internal LAN. When I turn on logging it is complaining that I have no translation rule outside interface to internal LAN. I have tried bypassing NAT via NAT 0 and ACL but no success.

Any ideas ??

Thanks Dave

srue · ‎04-13-2008

so your nat 0 statement/acl has your LAN network range for the source address and your vpn client address range for the destination part?

is sysopt connection permit-vpn/ipsec turned on?

(sh run sysopt)

if not, is your outside-to-inside ACL allowing access from the remote access address range?

dclee · ‎04-14-2008

Thanks, it was the Nat 0 acl, had to swap it around and make the source address the internal LAN.

Cheers

Dave