topic Re: Cisco ASA5510 - VPN Problem in Network Security

Cisco ASA5510 - VPN Problem

dtsteinb — Fri, 26 Apr 2019 15:41:44 GMT

I have a Cisco ASA 5510 and when someone VPN's in they can't reach one of my subnets (10.0.10.X). This subnet is tied to my AZURE servers and when a user tries to do anything that will require ADFS it fails because it can't connect. If they disconnect from VPN they are fine. I am not sure what I need to do to be able to connect to this. When I ping 10.0.10.X it times out. VPN is setup as Split tunnel.

Re: Cisco ASA5510 - VPN Problem

mvsheik123 — Sat, 27 Apr 2019 23:43:58 GMT

Hi,

Please post sanitized configs of ASA (related to VPN) or Make sure 10.0.10.x is advertised to VPN user and included in nonat /access-list rules.

hth

Re: Cisco ASA5510 - VPN Problem

Dennis Mink — Sun, 28 Apr 2019 12:25:08 GMT

if you use a split tunnel it might be that you have no route to the azure servers from the VPN. do a print route on a VPN connected machine and see if 10.0.10.x is routable from that machine. and also if the azure servers have a route back to the IP address of the vpn client

Re: Cisco ASA5510 - VPN Problem

dtsteinb — Mon, 01 Jul 2019 20:10:19 GMT

This is been resolved. . Had to add subnet to Azure.