Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN and DMZ issue

I have an ASA 5510 that have remote access VPN service enabled. Users are able to logon and access inside resources no problem. the issue is the DMZ servers, like the web server, they can not access. Is there and easy way to allow this access for VPN users?

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions
Green

Re: VPN and DMZ issue

That will allow you to hit your dmz servers. For instance if the dmz is 192.168.1.0, you can hit the servers by their dmz addresses 192.168.1.x etc.

Your other option is to use split tunneling which would allow you to access the servers via their public ip addresses which are translated in the ASA.

2 REPLIES
Green

Re: VPN and DMZ issue

You need to add nat exemption for the dmz as you did for the inside.

access-list dmz_nonat extended permit ip any

nat (dmz) 0 access-list dmz_nonat

Please rate helpful posts.

Green

Re: VPN and DMZ issue

That will allow you to hit your dmz servers. For instance if the dmz is 192.168.1.0, you can hit the servers by their dmz addresses 192.168.1.x etc.

Your other option is to use split tunneling which would allow you to access the servers via their public ip addresses which are translated in the ASA.

115
Views
0
Helpful
2
Replies