VPN internal Firewall

[MAZakirhussain]

Remote access VPN is configured on an ASA. The external interface of ASA is Private IP. Hence static NAT is configured on the Router that is connected to the Internet to do translation for VPN traffic.

Things are working fine but when more than one user connect from same place (Source is same Public IP) only one user can ping the servers. Other has VPN established but cannot ping any device.

When different users connect from different places there is not problem.

[husycisco · Accepted solution]

Hi Zakir

Make sure the following command exists in your configuration

cypto isakmp nat-traversal 20

Regards

[MAZakirhussain]

Hello,

The router is 2821 with version 12.4(1r). The command

crypto isakmp nat-traversal 20 is not available.

[kagodfrey · Accepted solution]

Configure "crypto isakmp nat-traversal 20" on the ASA

HTH

Kev