cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
439
Views
4
Helpful
3
Replies

VPN config

rhltechie
Level 1
Level 1

Hi All,

I have added a new network that my vpn users are allowed access to. I see it in the config and I also added the routing in the asa as well but still cannot get to the new network. is there something I must clear before this is allowed?

TIA,

R

3 Replies 3

desai.jaideep
Level 5
Level 5

Hi

Can u post both the configs?

Regards

JD

access-list outside_cryptomap_dyn_20_1 extended permit ip 192.168.x.0 255.255.255.0 192.168.x.0 255.255.255.128

access-list outside_cryptomap_dyn_20_1 extended permit ip 192.168.x.0 255.255.255.0 192.168.x.0 255.255.255.128

access-list outside_cryptomap_dyn_20_1 extended permit ip 192.168.x.0 255.255.255.0 192.168.x.0 255.255.255.128

access-list outside_cryptomap_dyn_20_1 extended permit ip 192.168.x.0 255.255.255.0 192.168.x.0 255.255.255.128

access-list outside_cryptomap_dyn_20_1 extended permit ip 192.168.x.0 255.255.255.0 192.168.x.0 255.255.255.128

route inside 192.168.x.0 255.255.255.0 192.168.x.20 1

route inside 192.168.x.0 255.255.255.0 192.168.x.1 1

route inside 192.168.x.0 255.255.255.0 192.168.x.20 1

route inside 192.168.x.0 255.255.255.0 192.168.x.20 1

route inside 192.168.x.0 255.255.255.0 192.168.x.1 1

route inside 192.168.x.0 255.255.255.0 192.168.x.20 1

route inside 192.168.x.0 255.255.255.0 192.168.x.1 1

Hello,

Does the destination network know how to get back to the ASA for the VPN Client Pool of IP Addresses.

Do you see decrypts on the ASA for the VPN Client that you are testing with or no decrypts at all.

Also, try clearing the xlate and see if that makes a difference.

Regards,

Arul

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card