Allowing OpenVPN through ASA5515X from DMZ to internal

vsemenov — Fri, 05 Apr 2019 12:55:43 GMT

Hi All,

please assist with the configurations.

Current Setup:

The INTERNAL interface where the OpenVPN server and local LAN clients are connected.

nat (inside,outside_isp1) source static VPN-SERVER-INTERNAL interface service OPENVPN-UDP-1198 OPENVPN-UDP-1198

access-list outside_isp1-acl-in extended permit udp any object VPN-SERVER-INTERNAL object-group OPENVPN-UDP

Clients from inside are able to connect to ISP1-PublicIP:1198

Now I have to configure a DMZ interface where clients have to be able to connect to the same OpenVPN server as above.

Currently, I'm using the same ISP (outside_isp1) when DMZ clients have to connect to the internet.

What port-forwards/NAT I have to set?

Any help is much appreciated.

Re: Allowing OpenVPN through ASA5515X from DMZ to internal

balaji.bandi — Fri, 05 Apr 2019 20:00:51 GMT

here is the example guide how to setup for reference :