topic Easy VPN Issue? in Network Security

Easy VPN Issue?

Charlie Mayes — Mon, 11 Mar 2019 20:26:09 GMT

Hello Guys,

I have 2 ASA5505 firewalls. I have one that has a static ip address that has been configured for Remote Access IPSEC VPN. The other one at the remote site I have configured the server Ip address for the first firewall. I have also up the Easy Vpn section of the firewall and it seems to connect because I see a red VPN light on the remote Firewall and a Green light on the server 5505 Firewall. I however can not connect/ping across the tunnel to my servers at the first site but if I connect using the VPN Client it works perfectly. I have tried to ping in Client mode and NEM Mode with no luck. What could be the problem?

Re: Easy VPN Issue?

mvsheik123 — Wed, 27 Apr 2011 17:01:22 GMT

Hi,

If the configs on Server end and client end are correct, one reason is the client ASA not getting the your spilttunnel network (internal networks). On cleint ASA do 'show vpnclient detail' gives you more information on the policy. If you still have issues, post both end units configs.

hth

Re: Easy VPN Issue?

Charlie Mayes — Wed, 27 Apr 2011 17:59:18 GMT

How I manually bring the tunnel up? Ids there a connect button somewhere on this remote ASA?

Re: Easy VPN Issue?

mvsheik123 — Wed, 27 Apr 2011 19:04:52 GMT

'vnclient nem-st-autocnnect' command on client should automaticvally initiate the connection. There is no button. Basic config on client looks this way..

vpnclient server x.x.x.x y.y.y.y --> Primary & backup server ips.

vpnclient mode network-extension-mode

vpnclient nem-st-autoconnect
vpnclient vpngroup password
vpnclient username password

vpnclient enable

Post the configs for both unts.

hth