ā03-06-2014 01:42 AM - edited ā03-07-2019 06:33 PM
hi all ,
i have
192.168.2.0./24lan1--------asa1--------inteernet--------asa2------lan2192.168.0.0/24
vpn ikev1 is up
and lan1 can see lan2
======================
im sure that i put the remnote lan of asa1 to "any"
but only the traffic to lan2 is being go fine without problems ???!!!
here is a packet tracer
test1 :
when i request 8.8.8.8 i have :
http://www11.0zz0.com/2014/03/06/09/768535004.png
===============================================
wheni request lan2 ip
i have successful :
http://www6.0zz0.com/2014/03/06/09/724402845.png
================================================
i dont know why !!
im sure than i putt the remote subnet to "any" at the asa1 !!
here is wt i mean
http://www12.0zz0.com/2014/03/06/09/177945307.png
==============================================
AGIAN , vpn is ok when i reach the remote side , but i cant reach asa2 if i requested something like 8.8.8.8
why ?
regards
ā03-06-2014 02:15 AM
i founbd that from the cli that the local is 192.168.2.0/24 !!!!
i dont know how that happedn im sure that i changed it by asdm ?!!
i did
show crypto ipsec rsa sa
i didntr see 0.0.0.0/0.0.0.0
!!
stange issue
ā03-06-2014 03:10 AM
i thunk that my problem is here
:
http://www12.0zz0.com/2014/03/06/11/775856466.png
i think i ned to change the
remote idnet to 0.0.0.0/0.0.0.0
how do it from cli ???
ā03-06-2014 04:32 AM
any help ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide