I have a PPTP dialin to a router, the vitual templace is places in zone_A
The clients can dialin fine and reach any host on the local net in the same security zone_A as they are.
But they can't reach clients on other zones (says zone_B) they should have access to.
When on the wired zone_A LAN direclty, then they can reach zone_B without problem.
When trying to analyze the issue, I can see that the fwd packets (zone_A pptp client -> zone_B server) go though just fine (they reach zone_B), but the return packet don't because it seems the router never created a session (show policy-firewall sesssions doesn't show anything)
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...