Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

dap, traffic from lan to vpnclient

Hi all,

I am configuring an ASA5510 8.2(1)11 to use dap to permit remote access using ipsec vpn client.

Everything is ok except when I try to connect from the LAN to the client.

I receive a message of Authorization denied for user 'unknown' because of the DAP applied to the vpn connection.

How can I permit connection?

Everyone's tags (2)

Re: dap, traffic from lan to vpnclient


what is the DAP policy that you are currently using. please post the output of debug dap menu 2 . Also wat does the debug dap trace show you. That should show which dap policy is being hit during login.

New Member

Re: dap, traffic from lan to vpnclient

This is the log I have:

6    Sep 24 2010    09:39:32    109025    Server    1648    9595    Authorization denied (acl=DAP-ip-user-0076860E) for user '' from Server/1648 to on interface inside using TCP

where is the ip address of the vpnclient.

In the dap I added an acl that permits traffic from the Server to the vpnclient network, and from dap trace I see that this acl is applied to the connection.

What do you mean with debug dap menu 2 ?

CreatePlease to create content