Hairpinning for Webvpn

jasontatom — Mon, 11 Mar 2019 22:20:54 GMT

Hi! Its my first time to post here not sure how it works.

Im having problems configuring Hairpinning thru WebVPN but it works with IPSEC. For testing I tried to used same address-pool and split tunnel policy and already enabled same-security and nat bypass for internal traffic. Everything works fine IPSEC except for WebVPN and for the WebVPN users they can access resources behind the firewall but not thru haripinning (outside interface).

Thanks

Hairpinning for Webvpn

mwinnett — Mon, 13 Feb 2012 16:04:19 GMT

Jason

Its been a while sicen I have done this, but here is a config that I used a while back for this (asa 8.0.2). The rest of the config as per standard

interface Ethernet0/0

nameif outside

security-level 0

ip address 20.1.1.1 255.255.255.0

same-security-traffic permit intra-interface

ip local pool vpn_user_pool 20.1.1.200-20.1.1.220 mask 255.255.255.0

webvpn

enable outside

svc image disk0:/sslclient-win-1.1.4.176.pkg 1

svc enable

group-policy msw-grp internal

group-policy msw-grp attributes

vpn-tunnel-protocol svc

webvpn

svc ask none default svc

username mwinnett password vukFd0JFOKL2l7IE encrypted privilege 15

tunnel-group DefaultWEBVPNGroup general-attributes

address-pool vpn_users

address-pool vpn_user_pool

default-group-policy msw-grp

prompt hostname context

ciscoasa(config)# sh vpn-sessiondb svc

Session Type: SVC

Username : mwinnett Index : 6

Assigned IP : 20.1.1.200 Public IP : 10.48.67.22

Protocol : Clientless SSL-Tunnel

Encryption : RC4 Hashing : SHA1

Bytes Tx : 45779 Bytes Rx : 19750

Group Policy : msw-grp Tunnel Group : DefaultWEBVPNGroup

Duration : 0h:01m:02s

NAC Result : Unknown

VLAN Mapping : N/A VLAN : none

topic Hairpinning for Webvpn in Network Security

Hairpinning for Webvpn

Hairpinning for Webvpn