VPN Traffic through incoming port

[gardcaleb]

On my 5510 ASA i would like for the VPN clients to be able to connect on the outside port and have their internet traffic directed back out that same port, with the internal traffic going to the inside port.  Is this possible?  If so, how should i go about doing this?

[Yudong Wu · Accepted solution]

VPN traffic will be forwarded based on routing table after getting out of tunnel.

If you would like to let the Internet traffic make u-turn on outside interface, you need add

- same-security-traffic permit intra-interface

- make the relate NAT change such as

global (outside) 4 interface

nat (outside) 4

[gardcaleb]

That worked perfectly.  Thank you.