ASA With AnyConnect VPN Issues

Unanswered Question
Jun 24th, 2008
User Badges:

I am trying to setup a VPN on this ASA using AnyConnect. I was able to get the IPSec VPN to work but we have to use AnyConnect for Vista support. I have the VPN part working to where clients can establish a VPN connection. The problem is that they cannot do anything from that point on. I think (am guessing) there is an issue with the return address translation, where the machine behind the firewall cannot properly communicate with a machine that is on the VPN. I have attached the running-config and was hoping someone could point me in the right direction. Here is an example of an error I am getting:

No translation group found for udp src outside: dst inside:


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Fernando_Meza Tue, 07/01/2008 - 03:31
User Badges:
  • Gold, 750 points or more


try enabling nat-traversal. At the moment it is disabled on your configuration

"no crypto isakmp nat-traversal"

from config mode type in as below and test it again.

crypto isakmp nat-traversal 20


This Discussion