Webvpn client ip address and tunnel group

jerryben11 · ‎12-21-2008

I have problem on making the connection to other VPN peer site on webvpn.

when our client connect to the webvpn, i've set to assign a pool of ip address, but when i check the ipconfig from client notebook, i found that the ip address is from IPS, not the address from my pool, how can i check the webvpn session and is it using the address assigned by ASA?

Can webvpn client connect to other VPN peer sites address?

i have the following commands:

tunnel-group DefaultWEBVPNGroup general-attributes

address-pool bigpool

authentication-server-group SG1

authentication-server-group (inside) SG1

default-group-policy SSL_IT

tunnel-group DefaultWEBVPNGroup webvpn-attributes

group-alias Default disable

tunnel-group DefaultWEBVPNGroup ipsec-attributes

isakmp keepalive threshold 3600 retry 2

ip local pool bigpool 192.168.100.101-192.168.100.120 mask 255.255.255.0

Thank you!

vmoopeung · ‎12-26-2008

Site-to-site VPN features provided by the adaptive security appliance enable businesses to extend their networks across low-cost public Internet connections to business partners and remote offices worldwide while maintaining their network security.

The following URL may help you:

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/sitesite.html#wp1042292