07-16-2022 09:49 AM - edited 07-16-2022 09:53 AM
I have a Cisco ASA 5510 with anyconnect setup, users are able to connect just fine and I have split tunneling setup to allow users to use internet while connected however I cannot connect or ping anything on the inside when I connect to the vpn. I have tried adding nat rules based on other guides but I am not sure if I'm just doing it wrong or if there is another issue. Any help would be greatly appreciated and I have posed the config for reference.
07-17-2022 07:28 PM
Oh ok I will not worry about the L3SW/R. Packet-tracer was a success prior to removing the temporary ACL however after removing it p-t is dropped due to acl.
07-18-2022 05:21 AM
Yes I know the temporary ACL will make the Packet-tracer drop but I ask for real after remove it?
07-18-2022 09:19 AM
Yes I have removed the ACL
07-18-2022 03:09 PM
C:\Users\admin>route print <- share the output of this from client PC
show vpn-sessiondb anyconnect <- share the output from ASA
07-18-2022 06:17 PM
07-18-2022 06:41 PM
username tater0214 attributes vpn-group-policy GroupPolicy_SSLVPN
the config is wrong and that why the group policy not show the right one.
Group Policy : anyconnect Tunnel Group : anyconnect
you need to group-lock to make local user lock to specific group.
username xxx password xxxxxxxx encrypted
username cisco attributes
group-lock value GroupPolicy_SSLVPN
and for the tunnel group I dont see any tunnel group anyconnect in your share config? are you add it later ?
07-18-2022 07:04 PM
07-19-2022 08:51 AM
I managed to get it to work and I feel quite dumb about how easy the solution was. There was an issue with the firewall on the inside host computer. I assumed that because it worked between 2 inside users it would also work between a vpn and an inside host, but I was mistaken. Thank you for all your help MHM
07-19-2022 08:59 AM
You are So So welcome friend.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide