topic Re: ASA Webvpn config question in Network Security

ASA Webvpn config question

bobsills — Mon, 11 Mar 2019 15:46:19 GMT

I am new to setting up webvpn connections. I managed to get everything set and can connect to the remote unit without issue using Anyconnect. The problem I am having is, after I established a vpn connection, I cannot connect to anything on the remote inside network (ie RDP to desktop) except to the ASA itself. Any guidance would be a big help.

Re: ASA Webvpn config question

andrew.prince — Mon, 22 Jun 2009 08:15:13 GMT

Change the IP address assigned to the webVPN users to another clean /24.

Make sure all L3 devices have a route to the ASA.

HTH>

Re: ASA Webvpn config question

shijomon scaria — Mon, 22 Jun 2009 10:04:58 GMT

Hello,

As andrew said, assign a new range of ip for web vpn pool (other than 192.168.0.0 range) and exclude that range from nat using the nat 0 command with a an access-list permitting traffic from 192.168.0.0 255.255.255.0 x.x.x.x 255.255.255.0.

Thank you,

Shijo

Re: ASA Webvpn config question

bobsills — Tue, 23 Jun 2009 02:51:43 GMT

Seems like I am still missing somethings. I made the changes as both you and andrer recommended but I am still getting the following in the syslogs when I try to connect to something:

3 Jun 22 2009 20:32:03 305005 192.168.0.10 No translation group found for icmp src outside:192.168.1.230 dst inside:192.168.0.10 (type 8, code 0)

I know I am missing something simple but not seeing it yet.

Thanks,

-Bob

Re: ASA Webvpn config question

andrew.prince — Tue, 23 Jun 2009 06:49:23 GMT

Change Your no-nat to:-

access-list inside_nat0_outbound extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0

Re: ASA Webvpn config question

bobsills — Wed, 24 Jun 2009 02:02:35 GMT

yes, that did the trick.

Thanks

Re: ASA Webvpn config question

andrew.prince — Wed, 24 Jun 2009 08:50:51 GMT

np - glad to help.