Based on your configuration, it appears you're trying to set up VPN access from both the inside and outside interfaces to the mgadm interface. The issue you're experiencing is due to the NAT configuration. Here's an explanation of the problem and a solution:
The NAT exemption rule you've configured is only for traffic between the mgadm interface and the outside interface. This allows VPN traffic from the outside to reach the mgadm network without being translated.
However, there's no NAT exemption for traffic between the inside interface and the mgadm interface. This is why the VPN from inside to mgadm only works without the NAT exemption.
To solve this issue and allow VPN access from both inside and outside to mgadm simultaneously, you need to add another NAT exemption rule for the inside to mgadm traffic. Here's how you can modify configurations
Keep your existing NAT exemption rule for outside to mgadm
nat (mgadm,outside) source static fb4vpn_ssl_mgadm_net fb4vpn_ssl_mgadm_net destination static fb4vpn_ssl_mgadm_pool fb4vpn_ssl_mgadm_pool
Add a new NAT exemption rule for inside to mgadm
nat (mgadm,inside) source static fb4vpn_ssl_mgadm_net fb4vpn_ssl_mgadm_net destination static fb4vpn_ssl_mgadm_pool fb4vpn_ssl_mgadm_pool
Keep your existing dynamic NAT rule for other traffic
nat (mgadm,outside) source dynamic subnet_mgadm pat-pool patpool_adm
these changes, VPN traffic should work in both directions:
From outside to mgadm,The first NAT exemption rule will allow this traffic without translation.
From inside to mgadm,The new NAT exemption rule will allow this traffic without translation.
Other traffic from mgadm to outside will still use the dynamic PAT rule.
Remember to apply these changes and save the configuration. Also, ensure that your VPN configuration (tunnel groups, group policies, etc.) is correctly set up to allow connections from both inside and outside interfaces127. If you still encounter issues, you may need to review your access control lists (ACLs) and ensure they permit the necessary VPN traffic between the interfaces35.
please do not forget to rate.
