I presume that the servers have and IP in the 192.168.2.0 subnet?
there are a couple things you can do to troubleshoot here.
First, while the remote host is connected to the VPN do a packet tracer from a server IP that is not working to the RA VPN client IP.
packet-tracer input inside tcp <server IP> 12345 <RA VPN client IP> 80 detail
second you can do a packet capture on the inside interface to see if traffic is leaving and entering the interface from the RA VPN client...or vice versa.
access-list CAP permit IP host < RA VPN CLIENT IP> host <server IP>
access-list CAP permit ip host <server IP> host RA VPN CLIENT IP>
capture CAPIN interface inside access-list CAP
show capture CAPIN
If you see traffic from the RA VPN client leaving the ASA inside interface but return traffic not entering the ASA, then there is a problem between the ASA and the server...or on the server itself. If you see traffic leaving and return traffic entering the ASA, then there is a problem on the ASA.
--
Please remember to select a correct answer and rate helpful posts
--
Please remember to select a correct answer and rate helpful posts
