topic Re: RA VPN from DMZ to outside interface in Network Security https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063608#M878648 <HTML><HEAD></HEAD><BODY><P>Yes exactly, but I want to use the same VPN profile when connecting from the DMZ - that is: be able to connect to the ip address of the outside interface while on the DMZ.</P></BODY></HTML> Fri, 19 Dec 2008 12:04:46 GMT rasmusan1 2008-12-19T12:04:46Z RA VPN from DMZ to outside interface https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063606#M878646 <P>Hello</P><P></P><P>I have an ASA 5520 on which i have created a IPsec VPN profile, that is enabled on my outside interface. Everything runs just perfect and I can connect from the internet using Cisco VPN client.</P><P>Now I wan't to be able to connect using VPN client from a DMZ interface on the same ASA using the same VPN profile in my Cisco VPN client.</P><P></P><P>however when I try to connect it just times out and the ASA logs "UDP request discarded".</P><P></P><P>what do I need to configure on the ASA to be able to connect to the IP address of my outside interface from the DMZ ?</P><P></P><P>any help i GREATLY appreciated <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>best regards</P> Mon, 11 Mar 2019 14:27:33 GMT https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063606#M878646 rasmusan1 2019-03-11T14:27:33Z Re: RA VPN from DMZ to outside interface https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063607#M878647 <HTML><HEAD></HEAD><BODY><P>While confiuring VPN profile it has to be assigned on the interface.In your scenario , it has already been configured on the OUTSIDE interface and so you will be able to do it from outside.But for DMZ interface , the VPN profile is not configured.</P></BODY></HTML> Fri, 19 Dec 2008 09:27:45 GMT https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063607#M878647 passioncas 2008-12-19T09:27:45Z Re: RA VPN from DMZ to outside interface https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063608#M878648 <HTML><HEAD></HEAD><BODY><P>Yes exactly, but I want to use the same VPN profile when connecting from the DMZ - that is: be able to connect to the ip address of the outside interface while on the DMZ.</P></BODY></HTML> Fri, 19 Dec 2008 12:04:46 GMT https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063608#M878648 rasmusan1 2008-12-19T12:04:46Z Re: RA VPN from DMZ to outside interface https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063609#M878649 <HTML><HEAD></HEAD><BODY><P>Hello Rasmus,</P><P> "be able to connect to the ip address of the outside interface while on the DMZ"</P><P> This is not possible with Cisco firewalls. But you can enable isakmp and map a cryptomap to DMZ interface and still be able to use that VPN Group. But if DMZ is a public subnet and requires a default route which will override outside default route, VPN termination at both interfaces wont be possible.</P><P></P><P>Regards</P></BODY></HTML> Fri, 19 Dec 2008 12:20:31 GMT https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063609#M878649 Alan Huseyin Kayahan 2008-12-19T12:20:31Z Re: RA VPN from DMZ to outside interface https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063610#M878650 <HTML><HEAD></HEAD><BODY><P>ok, that's what i thought - unfortunately</P><P></P><P>well thanks for your help, I have to solve it some other way</P><P></P><P>best regards</P></BODY></HTML> Fri, 19 Dec 2008 13:19:05 GMT https://community.cisco.com/t5/network-security/ra-vpn-from-dmz-to-outside-interface/m-p/1063610#M878650 rasmusan1 2008-12-19T13:19:05Z