Site-to-site VPN One way access?

[bastion2011]

Hi

We have a Cisco ASA 5510 at our main office that makes connection with a 5505 at our other office using site to site VPN. (works)

Now for the qeustion,

we want to access our other office from the main office but we wont want them to have access to our servers etc.

so bassicly we want to control them but they shouldnt have the rights to control us.

is this possible with a site to site VPN? and how to do it

thanks already

[andrew.prince · Accepted solution]

You just need to configure an access list on the inside interface that either permits or denies traffic from the remote subnet.

Sent from Cisco Technical Support iPad App

[bastion2011]

I have already tried that, but then i wasnt able to connect to them from the main office. i'm gonna try it again ill let you know if it worked. thanks for the reply

[vipinrajrc]

Hi,

Create a ACL in your office to deny traffic from your branch to your office.

Also create a ACL in your branch office to permit traffic from your office to your branch.

Also bind this ACL to the outside interface of the ASA.

hope this helps

Thanks

[ajay chauhan]

You can use VPN-filter which is basically ACL control traffic on VPN tunnel.

https://supportforums.cisco.com/message/3510743#3510743

[bastion2011]

Ok i got i working now, i can rdp them but they cant rdp us so thats good thanks alot!

[andrew.prince]

Glad to help.

[bastion2011]

Thanks

Met vriendelijke groet,

Jan Heskes

Directeur

Bastion ICT

Dichtbij en persoonlijk

Industrieweg 30c

4283 GZ Giessen

T: 0183 – 822 801

F: 0183 – 822 804

M: j.heskes@bastionict.nl

W : www.bastionict.nl<>

De informatie verzonden in dit e-mailbericht is vertrouwelijk en is uitsluitend bestemd voor de geadresseerde. Openbaarmaking, vermenigvuldiging, verspreiding en/of verstrekking van deze informatie aan derden is, behoudens voorafgaande schriftelijke toestemming van Bastion ICT niet toegestaan.

Denk aan het milieu voordat u deze e-mail uitprint.

Van: andrew.prince@monster.com

Verzonden: dinsdag 13 december 2011 14:14

Aan: Jan Heskes

Onderwerp: - Re: Site-to-site VPN One way access?

Home<>

Re: Site-to-site VPN One way access?

created by Andrew Prince<> in Firewalling - View the full discussion<>