topic Re: VPN access in Network Security https://community.cisco.com/t5/network-security/vpn-access/m-p/769711#M970330 <HTML><HEAD></HEAD><BODY><P>That seems to have worked. </P><P></P><P>I thank you kind sir.</P><P></P><P>David</P></BODY></HTML> Thu, 30 Aug 2007 16:48:00 GMT dvanhaaren 2007-08-30T16:48:00Z VPN access https://community.cisco.com/t5/network-security/vpn-access/m-p/769707#M970323 <P>I have an ASA5510 running ios 7.2(2). When a client VPN is established they are not able to access any server that dose not have a static translation built. Is it necessary to build static translations for every server that needs to accessed or is there a more simple way of doing this. I've tried the sysopt command and building a vpn-filter under the policy setting neither seems to help. Any suggestions would be appreciated.</P> Mon, 11 Mar 2019 11:04:28 GMT https://community.cisco.com/t5/network-security/vpn-access/m-p/769707#M970323 dvanhaaren 2019-03-11T11:04:28Z Re: VPN access https://community.cisco.com/t5/network-security/vpn-access/m-p/769708#M970324 <HTML><HEAD></HEAD><BODY><P>which sysopt command? permit-vpn?</P><P>Do your crypto acl's allow the communication to said servers? are you using split tunneling?</P><P>can you post a partial config?</P></BODY></HTML> Thu, 30 Aug 2007 15:46:28 GMT https://community.cisco.com/t5/network-security/vpn-access/m-p/769708#M970324 srue 2007-08-30T15:46:28Z Re: VPN access https://community.cisco.com/t5/network-security/vpn-access/m-p/769709#M970326 <HTML><HEAD></HEAD><BODY><P>sysopt connection permit-vpn is the command I used.</P><P></P><P>This is a client to ASA VPN with no split tunneling.</P><P></P><P>The ACL's I tried were allowing all traffic from the tunnel-group to the server network.</P><P>access-list 10 remark verizonVPN</P><P>access-list 10 extended permit ip any 10.3.0.0 255.255.0.0</P><P>access-list 10 extended permit ip any 10.2.0.0 255.255.0.0</P><P>__________</P><P>group-policy verizon attributes</P><P> dns-server value 10.3.1.48 207.78.40.49</P><P> vpn-simultaneous-logins 10</P><P> default-domain value QDINC.net </P><P> vpn-filter value 10 </P><P>________</P><P>tunnel-group verizon type ipsec-ra</P><P>tunnel-group verizon general-attributes</P><P> address-pool qdi</P><P> authentication-server-group TACACS+ LOCAL</P><P> default-group-policy verizon</P><P>tunnel-group verizon ipsec-attributes</P><P> pre-shared-key * </P></BODY></HTML> Thu, 30 Aug 2007 16:04:10 GMT https://community.cisco.com/t5/network-security/vpn-access/m-p/769709#M970326 dvanhaaren 2007-08-30T16:04:10Z Re: VPN access https://community.cisco.com/t5/network-security/vpn-access/m-p/769710#M970328 <HTML><HEAD></HEAD><BODY><P>access-list nat0_acl permit 10.3.0.0 255.255.0.0 remoteaccess_pool</P><P>access-list nat0_acl permit 10.2.0.0 255.255.0.0 remoteaccess_pool</P><P>nat (inside) 0 access-list nat0_acl</P><P></P><P>substitute 'remoteaccess_pool' with whatever the IP range is of your actual pool</P></BODY></HTML> Thu, 30 Aug 2007 16:34:07 GMT https://community.cisco.com/t5/network-security/vpn-access/m-p/769710#M970328 srue 2007-08-30T16:34:07Z Re: VPN access https://community.cisco.com/t5/network-security/vpn-access/m-p/769711#M970330 <HTML><HEAD></HEAD><BODY><P>That seems to have worked. </P><P></P><P>I thank you kind sir.</P><P></P><P>David</P></BODY></HTML> Thu, 30 Aug 2007 16:48:00 GMT https://community.cisco.com/t5/network-security/vpn-access/m-p/769711#M970330 dvanhaaren 2007-08-30T16:48:00Z Re: VPN access https://community.cisco.com/t5/network-security/vpn-access/m-p/769712#M970332 <HTML><HEAD></HEAD><BODY><P>you're welcome...and thanks for the rating.</P></BODY></HTML> Thu, 30 Aug 2007 16:53:38 GMT https://community.cisco.com/t5/network-security/vpn-access/m-p/769712#M970332 srue 2007-08-30T16:53:38Z