Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA Webvpn config question

I am new to setting up webvpn connections. I managed to get everything set and can connect to the remote unit without issue using Anyconnect. The problem I am having is, after I established a vpn connection, I cannot connect to anything on the remote inside network (ie RDP to desktop) except to the ASA itself. Any guidance would be a big help.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: ASA Webvpn config question

Change Your no-nat to:-

access-list inside_nat0_outbound extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0

6 REPLIES

Re: ASA Webvpn config question

Change the IP address assigned to the webVPN users to another clean /24.

Make sure all L3 devices have a route to the ASA.

HTH>

New Member

Re: ASA Webvpn config question

Hello,

As andrew said, assign a new range of ip for web vpn pool (other than 192.168.0.0 range) and exclude that range from nat using the nat 0 command with a an access-list permitting traffic from 192.168.0.0 255.255.255.0 x.x.x.x 255.255.255.0.

Thank you,

Shijo

New Member

Re: ASA Webvpn config question

Seems like I am still missing somethings. I made the changes as both you and andrer recommended but I am still getting the following in the syslogs when I try to connect to something:

3 Jun 22 2009 20:32:03 305005 192.168.0.10 No translation group found for icmp src outside:192.168.1.230 dst inside:192.168.0.10 (type 8, code 0)

I know I am missing something simple but not seeing it yet.

Thanks,

-Bob

Re: ASA Webvpn config question

Change Your no-nat to:-

access-list inside_nat0_outbound extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0

New Member

Re: ASA Webvpn config question

yes, that did the trick.

Thanks

Re: ASA Webvpn config question

np - glad to help.

159
Views
0
Helpful
6
Replies