topic Use of bookmarks of resources which are located behind a S-to-S in Network Security

Use of bookmarks of resources which are located behind a S-to-S VPN

Jeroen Epema — Tue, 12 Mar 2019 01:30:10 GMT

Hi there,

I was wondering if i can create (a) bookmark(s) of resources which are located behind a particular Site-to-Site VPN?

We are using a Cisco ASA 5510 (9.0.2) with SSL VPN configured. The tunnel is up but when i try the bookmark, i get the error "server unavailable".

Can someone put my in the right direction? I'm rather new at this stuff...

Thank you.

Use of bookmarks of resources which are located behind a S-to-S

Kimberly Adams — Wed, 17 Apr 2013 17:12:36 GMT

Jeroen,

Is this a remote access SSL VPN? If it is, are you tunneling everything and also do you get the proper DNS that would resolve the bookmarks to the correct server IP? This is the first place I would start looking.

Thanks and Cheers!

Kimberly

Please remember to rate helpful posts.

Re: Use of bookmarks of resources which are located behind a S-t

Jeroen Epema — Wed, 24 Apr 2013 11:18:42 GMT

Hi Kimberly,

My apologies for my late response.

I'm using a clientless SSL VPN connection. I'm not using any DNS servers, just IP addresses for now to get this up and running.

I'm not quite sure what you mean by tunneling everything in this context.

Regards,

Jeroen

Edit: When i try to ping the destination from the Cisco ASA, the traffic is routed to internet. The subnet 192.168.177.0/24 belongs to the remote site.

Below the routing table:

Gateway of last resort is to network 0.0.0.0

C    x.x.x.x 255.255.255.248 is directly connected, outside
C    10.17.10.0 255.255.255.0 is directly connected, bdi
S    10.100.132.0 255.255.255.0 [1/0] via 10.100.130.254, inside
C    10.100.130.0 255.255.255.0 is directly connected, inside
S    10.100.131.0 255.255.255.0 [1/0] via 10.100.130.254, inside
S*   0.0.0.0 0.0.0.0 [1/0] via , outside

And the result when i trace the destination:

ciscoasa# trace 192.168.177.29

Type escape sequence to abort.
Tracing the route to 192.168.177.29

1 0 msec 0 msec 10 msec
2 10.98.135.182 0 msec 0 msec 0 msec
3 62.140.145.58 0 msec 0 msec 0 msec
4 * * *

Traffic generated from a host within the local subnet (10.100.130.0/24) has no problem reaching the remote site.

As a result of this some of my bookmarks won't work either.