Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Access Multiple Network Segments over VPN

Our client has a 5510 with 5505 at three branch offices. I am able to access the 5510 through remote access vpn, but need to be able to run a Lansurveyor to maintain inventory on their network. I can only access the segment of the network that I vpn to. How can I access the other segments while connected to the 5510. Here's a summary. I can connect to 192.168.10.0/24 via remote access vpn, but also need to have access to 192.168.30.0/24, 192.168.40.0/24, and 192.168.50.0/24.

4 REPLIES

Re: Access Multiple Network Segments over VPN

You need to create acl on asa5510 where you are VPNing into in order to permit vpn network to access other inside segmets for 192.168.30.0,40,and 50 respectivately.

for example if the vpn RA network on the asa5510 that assign addresses to vpn clients is 192.168.10.0/24 create acl to permit vpn net to inside nets.

access-list inside_nat0_outbound extended permit ip 192.168.30.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list inside_nat0_outbound extended permit ip 192.168.40.0 255.255.255.0 192.168.10.0 255.255.255.0

access-list inside_nat0_outbound extended permit ip 192.168.50.0 255.255.255.0 192.168.10.0 255.255.255.0

nat(inside) 0 access-list inside_nat0_outbound

HTH

Jorge

New Member

Re: Access Multiple Network Segments over VPN

I've entered your recommendations, but still no luck. Do I need to make changes to each ASA 5505 as well, or just the 5510?

Thanks

Re: Access Multiple Network Segments over VPN

Hi Dillard, are the 192.168.30.0, and 192.168.40 and 50 behind the 5510 firewall? I thought so if not please confirm, puting the lansurveyor aside for a minute when you vpn to 5510 are you able to connect to any host on the 192.168.30,40,50 segments at all? can you from the other side 5510 firewall see logs to find out if there is any NAT issues when trying to access those segments, get this part straighten out first before moving onto the lansurveyor part.

Rgds

-Jorge

des
New Member

Re: Access Multiple Network Segments over VPN

I am in the same boat and the posted suggestion/solution doesn't appear to apply.

From behind the 5510 I can access everything at the branch offices. When I VPN into the 5510 I can only access what is on that network, nothing at any of the branch offices. I'd like to be able to VPN into the 5510 and be able to access each branch office's network.

Please advise, thanks!

272
Views
0
Helpful
4
Replies
CreatePlease login to create content