source address from firewall

suthomas1 · ‎07-21-2009

Hi,

I have an ASA acting as vpn firewall with two interfaces- VPN_external & local.

once i vpn in and get my ip address from the vpn pool, if i am to telnet to another device in my network which is on a differenct ip segment,which interface from the VPN firewall would be acting as source for this telnet connection initiated?

Thanks.

Roman Rodichev · ‎07-21-2009

traffic would be coming from your VPN client's IP address

suthomas1 · ‎07-22-2009

Ok..But when i initiate a telnet connection while connected to this VPN pool, the flow would take which interface as source, external or internal; as if am correct the vpn pool is assigned by firewall itself & doesnt reside on any interface.

Reason for this query is that am unable to access some of the devices in the same segment via telnet from within this VPN, so i was wondering if i need to put an acl for them.

Thanks.

srue · ‎07-22-2009

is sysopt connection permit-ipsec enabled?

is split tunneling enabled?

suthomas1 · ‎07-22-2009

this one supports ssl vpn;

split tunneling is disabled.