Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Only One user can use the VPN at a time...

Hi,

We've built a Remote Access VPN on our ASA5520 here and have run into something odd. I think so anyway.

Only one user can VPN in and actually access our network at a time. Any other users can log in but are essentially isolated. They can't access any equipment on our network.

I'm using a IP pool for VPN users of 10.2.10.0/24... the only pingable address on that network is the first user who logged in. No one else is pingable from each other, or from any device on our network.

Has anyone seen this before?

Thanks

4 REPLIES
Community Member

Re: Only One user can use the VPN at a time...

To add to this.

I do see the VPN connection establish on the ASDM Log window, but I do not see any log messages when I attempt to ping or access a device from the faulty connection.

From the 1 working connection, I do.

It's almost like the info is being routed elsewhere...

Silver

Re: Only One user can use the VPN at a time...

There is no config here . Can you paste it?

Re: Only One user can use the VPN at a time...

To solve an issue early the reason why "No one else is pingable from each other" is you are not allowin intra-interface communication:-

Add the following:-

same-security-traffic permit intra-interface

This will allow multiple VPN client connections to communicate with each other.

Post your config for a review of only 1 user at a time issue.

HTH>

Silver

Re: Only One user can use the VPN at a time...

I am not sure if this issue is happening because of following observation.

The config is using ip 10.2.10.255 in the VPN pool , we cannot use this ip address as this is broadcast ip in the VPN pool subnet. Do the following and then check connecting vpn clients and post results.

no ip local pool ifn_noc_ips 10.2.10.1-10.2.10.255 mask 255.255.255.0

ip local pool ifn_noc_ips 10.2.10.1-10.2.10.254 mask 255.255.255.0

HTH

Saju

Pls rate helpful posts

142
Views
0
Helpful
4
Replies
CreatePlease to create content