cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

697
Views
5
Helpful
2
Replies
Highlighted
Beginner

VPN routing

Hello All.

 

I have an ASA 5506 and i have 2 problems with my VPN.

1- when i make a split tunnel it works and i get access to the internet but i can't access my local network.

2- if im not using a split tunnel i can access my local network except one Subnet  For example:

Servers Subnet:172.16.11.0/24

CCTV Subnet:172.16.18.0/24

i can access the Servers Subnet but i can't do the same with CCTV Subnet.

Can anyone help me with this??

 

Thanks in advance.

2 REPLIES 2
Beginner

Re: VPN routing

Can you please share the config of your ASA

Participant

Re: VPN routing

Create a split tunnel that includes only the networks you wish to access. The access list referenced by the split tunnel command should encompass both subnets 172.16.11.0/24 and 172.16.18.0/24. Ensure the subnets are reachable from the ASA.

 

ciscoasa(config)#access-list Split_Tunnel_List remark The corporate network behind the ASA.
ciscoasa(config)#access-list Split_Tunnel_List standard permit 10.0.1.0 255.255.255.0

 

ciscoasa(config)#group-policy hillvalleyvpn attributes
ciscoasa(config-group-policy)#

 

ciscoasa(config-group-policy)#split-tunnel-policy tunnelspecified 

 

ciscoasa(config-group-policy)#split-tunnel-network-list value Split_Tunnel_List

 

ciscoasa(config-tunnel-ipsec)# default-group-policy hillvalleyvpn general-attributes

 

ciscoasa(config-tunnel-ipsec)# default-group-policy hillvalleyvpn

 


ASA/PIX: Allow Split Tunneling for VPN Clients on the ASA Configuration Example

Remember to rate helpful posts and/or mark as a solution if your issue is resolved.
CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards


This widget could not be displayed.