topic Re: VPN site to site (ASA and VMware vShield) in Network Security https://community.cisco.com/t5/network-security/vpn-site-to-site-asa-and-vmware-vshield/m-p/3479039#M155563 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>The problem was, i forget rule bypass NAT . So, this rule is fixed the connections between the servers in both sides.</P><P>nat (inside) 0 access-list ACL_NAME</P><P></P><P>Regards!</P></BODY></HTML> Thu, 13 Oct 2016 11:13:18 GMT thorchin 2016-10-13T11:13:18Z VPN site to site (ASA and VMware vShield) https://community.cisco.com/t5/network-security/vpn-site-to-site-asa-and-vmware-vshield/m-p/3479038#M155562 <HTML><HEAD></HEAD><BODY><P>Hi, i need configure VPN tunnel between ASA and VMware vShield Edge. The configuration is fine, between to sides the tunnel is up, but the servers in both side don't have comunication. So, my question is.. What are the requieriment for servers can comunicate?</P><P></P><P></P><P>These are the configuration:</P><P></P><P>&nbsp;&nbsp;&nbsp; - I configure static route in ASA for can make connection with remote LAN (internal LAN)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; # route outside IP_REMOTE_LAN_INTERNAL IP_REMOTE_PUBLIC_IP</P><P>&nbsp;&nbsp;&nbsp;&nbsp; - I configure ACL for crypto map where permit local internal lan traffic to remote internal lan traffic</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; # access-list name extended permit ip LOCAL_LAN REMOTE_LAN</P><P>&nbsp;&nbsp;&nbsp;&nbsp; - The internal remote and local LAN, don't overlies IP network address.</P><P></P><P>Thanks in advanced, regards!</P></BODY></HTML> Wed, 12 Oct 2016 18:10:56 GMT https://community.cisco.com/t5/network-security/vpn-site-to-site-asa-and-vmware-vshield/m-p/3479038#M155562 thorchin 2016-10-12T18:10:56Z Re: VPN site to site (ASA and VMware vShield) https://community.cisco.com/t5/network-security/vpn-site-to-site-asa-and-vmware-vshield/m-p/3479039#M155563 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>The problem was, i forget rule bypass NAT . So, this rule is fixed the connections between the servers in both sides.</P><P>nat (inside) 0 access-list ACL_NAME</P><P></P><P>Regards!</P></BODY></HTML> Thu, 13 Oct 2016 11:13:18 GMT https://community.cisco.com/t5/network-security/vpn-site-to-site-asa-and-vmware-vshield/m-p/3479039#M155563 thorchin 2016-10-13T11:13:18Z