vpn clients need to use ASA public IP

Answered Question
Aug 14th, 2009


I am using an ASA5510 running version 8.04

I have a requirement for vpn clients to terminate on the ASA (come in the outside interface) and to then use the public IP address of the ASA to access certain websites (go back out the same interface they came in). Is this possible?

What I would ultimately like to achieve is to have the vpn clients access certain websites through the ASA and the rest of the web through their own internet connection (split tunnelling). Would this be possibe in this scenario.

Thanks for your help.

Correct Answer by acomiskey about 7 years 6 months ago

If vpn clients are then...

global (outside) 1 interface

nat (outside) 1

same-security-traffic permit intra-interface

Then simply create your split tunnel acl and include all sites you want them to access through the remote ASA.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
donaghq_2 Wed, 08/26/2009 - 04:31

implemented this in production - works well. just do the same setup as you would for any remote access and use the commands given above.


This Discussion