topic To which interface does my VPN Pool belong? in Network Security

To which interface does my VPN Pool belong?

rjadhav163 — Tue, 12 Mar 2019 08:19:52 GMT

I have AnyConnect RA SSL VPN configured on ASA. Lets assume following Addresses:

Outside Interface IP where the Users Connect to: 172.16.10.1

Inside net: 10.10.10.0/24 with inside interface IP 10.10.10.1/24

VPN Pool: 192.168.10.0/24

So this pool is not attached to any interface. After the users connect and get their IP Addresses from this pool, I want to allow access to only 10.10.10.100 in the inside net. Also internet access must be allowed.

To which interface must my access-lists be attached?

Thanks and Regards,

Generally they belong to

Marvin Rhoads — Tue, 27 Sep 2016 18:12:37 GMT

Generally they belong to "outside".

However we don't apply an interface access list to make such a restriction - we use a vpn-filter. Please refer to this guide:

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/99103-pix-asa-vpn-filter.html

Thanks Marvin. That helped!

rjadhav163 — Fri, 18 Nov 2016 16:11:35 GMT

Thanks Marvin. That helped!