vpn clients need to use ASA public IP

Answered Question
Aug 14th, 2009

Hello

I am using an ASA5510 running version 8.04

I have a requirement for vpn clients to terminate on the ASA (come in the outside interface) and to then use the public IP address of the ASA to access certain websites (go back out the same interface they came in). Is this possible?

What I would ultimately like to achieve is to have the vpn clients access certain websites through the ASA and the rest of the web through their own internet connection (split tunnelling). Would this be possibe in this scenario.

Thanks for your help.

I have this problem too.
0 votes
Correct Answer by acomiskey about 7 years 3 months ago

If vpn clients are 192.168.1.0/24 then...

global (outside) 1 interface

nat (outside) 1 192.168.1.0 255.255.255.0

same-security-traffic permit intra-interface

Then simply create your split tunnel acl and include all sites you want them to access through the remote ASA.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805734ae.shtml

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
donaghq_2 Wed, 08/26/2009 - 04:31

implemented this in production - works well. just do the same setup as you would for any remote access and use the commands given above.

Actions

This Discussion