ASA blocking IPsec to any outside end-point

rwiechman — Mon, 11 Mar 2019 16:55:13 GMT

I have a routed firewall configuration that requires folks on Inside network to be able to use

IPsec VPN which terminates both at the shared public interface and also other end points.

I can't seem to set the ASA to allow it. I've added a low security IPsec-passthrough-map

which didn't help.

I am fine with globally allowing the use of IPsec from the internal network.

Any ideas would be appreciated.

Thanks, Roger

Re: ASA blocking IPsec to any outside end-point

vilaxmi — Sat, 09 Jan 2010 19:52:43 GMT

Hello,

Is your tunnel UP and you are just not able to pass traffic or your tunnel itself is notcoming UP ? Try pasting show crypto isakmp sa and show crypto ipsec sa and also show run

For exempting vpn traffic form ACL check you can try :

sysopt connection permit-vpn global config command

HTH

Vijaya

topic Re: ASA blocking IPsec to any outside end-point in Network Security

ASA blocking IPsec to any outside end-point

Re: ASA blocking IPsec to any outside end-point