Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
787
Views
0
Helpful
1
Replies

Route Internet Traffic through a RA IPSec VPN Tunnel

Go to solution
sabbinanti
Level 1
Level 1

‎03-22-2010 09:21 PM - edited ‎02-21-2020 04:33 PM

Armed with an ASA 5505 Security Plus, I have setup IPSec VPN for RA. The VPN IP Address pool is in the 192.168.2.0/28 network.

The Lan is 192.168.1.0/24 with the inside interface at .254.

The VPN works fine. What I would like to do is route all internet traffic through the Firewall when users are connected to the VPN. I have set the default tunnel gateway to 192.168.1.254, but I am having no luck getting this to work.

Any ideas?

Thanks in advance!

Labels:
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
Jennifer Halim
Cisco Employee
Cisco Employee

‎03-22-2010 10:42 PM

Are you just going to route the internet traffic from the remote vpn client towards the ASA and straight back out to the internet?

If the above statement is correct, you don't need to configure the tunnel default gateway.

But you need to configure NAT for the ip pool so they can go out to the internet, as well as the "same-security-traffic" command as follows:

nat (outside) 1 192.168.2.0 255.255.255.0

same-security-traffic permit intra-interface

Also, assuming you do not have split tunnel configured.

View solution in original post

0 Helpful
1 Reply 1

Go to solution
Jennifer Halim
Cisco Employee
Cisco Employee

‎03-22-2010 10:42 PM

Are you just going to route the internet traffic from the remote vpn client towards the ASA and straight back out to the internet?

If the above statement is correct, you don't need to configure the tunnel default gateway.

But you need to configure NAT for the ip pool so they can go out to the internet, as well as the "same-security-traffic" command as follows:

nat (outside) 1 192.168.2.0 255.255.255.0

same-security-traffic permit intra-interface

Also, assuming you do not have split tunnel configured.

0 Helpful
Customers Also Viewed These Support Documents