topic Hello, in Network Security

Cannot connect to other vpn clients (ASA)

HHeydarov — Tue, 12 Mar 2019 07:59:14 GMT

Hi friends.

I have a cisco ASA 5520 device configured with IPsec remote access VPN (ASA version 9.0)

I can connect INSIDE and DMZ network, but not able to access other clients connected to same VPN.

For example if I have 2 clients connected to VPN,(172.16.66.21 and 172.16.66.22) these both clients are not able to communicate with each other.

How can I fix this problem?

Thanks in advance.

Aditya Ganjoo — Tue, 05 Jul 2016 08:27:52 GMT

Hi,

You need to configure same-security-traffic permit intra-interface on the ASA.

Also in the split tunnel ACL you need to add the VPN pool.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

HHeydarov — Tue, 05 Jul 2016 08:35:08 GMT

Dear friend,

I have already configured same-security-traffic permit intra-interface on ASA and split tunnel standart access-list.

HHeydarov — Fri, 05 Aug 2016 08:15:22 GMT

can anybody help me?

Cristian Nilsson — Fri, 05 Aug 2016 11:00:23 GMT

Hello,

You need to no-nat VPN traffic for communication client-client.

Example:

object network VPN-POOL
 subnet 10.0.0.0 255.255.255.240

nat (OUTSIDE,OUTSIDE) 1 source static VPN-POOL VPN-POOL destination static VPN-POOL VPN-POOL

//Cristian