topic Re: RAVPN and data traffic on FMC in Network Security

RAVPN and data traffic on FMC

KayaaKashyap — Tue, 12 Dec 2023 13:49:40 GMT

Can we configure data traffic and RAVPN traffic on same interface of FTD?

If Yes, Please share supportive document.

thanks !

Re: RAVPN and data traffic on FMC

Rob Ingram — Tue, 12 Dec 2023 13:53:27 GMT

@KayaaKashyap of course you can, that's how it work. You just enable RAVPN on the outside/external which can be the same interface for normal user data traffic.

https://www.cisco.com/c/en/us/support/docs/network-management/remote-access/212424-anyconnect-remote-access-vpn-configurati.html

Re: RAVPN and data traffic on FMC

MHM Cisco World — Tue, 12 Dec 2023 13:54:08 GMT

Sure Yes friend
the Outside can use to make Internal host access Internet
and also to make Anyconnect access Internal subnet
MHM

Re: RAVPN and data traffic on FMC

KayaaKashyap — Tue, 12 Dec 2023 14:14:42 GMT

So for my understanding, please give your input. here I will explain my requirement:

FTD outside interface will connect to SDWAN cloud and internal network will get internet from there only.

On same interface(outside) of FTD I can configure RAVPN. Right?

Re: RAVPN and data traffic on FMC

MHM Cisco World — Tue, 12 Dec 2023 14:23:11 GMT

No problem' only make SDWAN use PAT 1:1 for port 443 from there public IP to your private FTD IP.

This make anyconnect in internet access your FTD uisng public IP of sdwan.

MHM

Re: RAVPN and data traffic on FMC

Rob Ingram — Tue, 12 Dec 2023 14:24:40 GMT

@KayaaKashyap does the FTD outside interface only connect to the SDWAN cloud? Or does the FTD have a public/routable IP address and can the FTD access the internet directly? If so you then yes, just NAT outbound internet traffic and enable RAVPN on the outside interface for Remote Access.

Re: RAVPN and data traffic on FMC

Marius Gunnerud — Tue, 12 Dec 2023 22:13:38 GMT

As long as the FTD has a reachable public IP you can configure RAVPN on that interface, Data traffic passes on the interface just the same. If the FTD has a private IP connected to the SDWAN then you would need to configure NAT on the internet gateway device to forward SSL traffic between a public IP and the FTD private IP.