cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
919
Views
0
Helpful
1
Replies

ASA5506-x Nat with OpenVPN?

Maurizio Caloro
Level 1
Level 1

Hello
Please try to Setup NAT for OpenVPN, here my Setup

 

hello together

I think the bounding for ports that are used for OpenVPN to NAT to Outside.
i have here the problem that i can't build any connection to
internal OpenVPN Server, the necessary ports are from me setup
always open.

 

object network inside-subnet

subnet 192.168.1.0 255.255.255.0

 

object network dns-server

host 192.168.1.9

 

object network outside2domino
host 192.168.1.9

 

object network OpenVPN
host 192.168.1.9

 

access-list inbound extended permit icmp any any time-exceeded
access-list inbound extended permit icmp any any unreachable

 

access-list outside_access_in extended permit icmp any any echo
access-list outside_access_in extended permit icmp any any echo-reply

 

access-list outside_acl extended permit ip any any

 

access-list outside extended permit tcp any object outside2domino eq lotusnotes
access-list outside extended permit udp any object outside2domino eq 53

 

access-list outside extended permit udp any object OpenVPN eq 1194
access-list outside extended permit tcp any object OpenVPN eq 1194
access-list outside extended permit tcp any object OpenVPN eq 443
access-list outside extended permit udp any object OpenVPN eq 443
access-list outside extended permit tcp any object OpenVPN eq 943
access-list outside extended permit tcp any object OpenVPN eq 80

 

object network outside2domino
nat (inside_4,outside) static interface service tcp lotusnotes lotusnotes
object network OpenVPN
nat (inside_4,outside) static interface service udp 1194 1194

 

access-group outside in interface outside

 

iam not shure if i need to use the Object-Group command, why the OpenVPN has meny ports to NAT not only one.

Thanks

 

1 Reply 1

Maurizio Caloro
Level 1
Level 1

Please any one know here any possible help

 

--

Setup example

1) Interland Server OpenVPN this will Service for Outside people that are traveling in the World and need Access to Internal infrastructure.

2) Firewall are connected that need transfert the OpenVPN Traffic from Outside >< Inside (OpenVPN-Server)

 

please see the config above..... thanks many time for any possible help
Regards

 

Review Cisco Networking for a $25 gift card