02-19-2014 06:54 AM
Hi there.
Got a very simple Site to Site VPN setup.
LAN1, 172.16.0.0/24 |----ASA-----------------| INTERNET |-----------------ASA----|192.168.0.0/24, LAN2
Is it some what possible to restrict access from LAN1 -> LAN2 over VPN.
How is this done? And on which unit is the ACL placed? Both ends?
Say i have HostA on LAN1 that want to access HostB on LAN2 on port 80.
And say i have HostB on LAN2 that want to access HostA on LAN1 on port 443
As per default as far as I know all access is allowed.
Thanks!