About FlyingFinn

FlyingFinn · 02-08-2023

Hello:I have a Cisco ASA 5525 (9.12) that has IPsec VPN tunnels to 2 other sites, Site-a and Site-b. VTI and BGP is used for the tunnel to Site-a, ACL policy based VPN is used for the other tunnel to Site-b. Site-a has subnet 10.10.0.0/16, Site-b has...

FlyingFinn · 02-09-2023

I use packet-tracer often to verify my VPN config, it works well in most cases, but I know from my past experiences there are cases it doesn't work, I think VTI based VPN application is one of them. In my case, even now everything works as expected, ...

FlyingFinn · 02-09-2023

That did the trick!I had the similar thought, ie, a static route pointing to the tunnel. But I dismissed the idea because 1) ACL policy based VPN setup doesn't require static route, 2) a static route using public GW would send packets to public inter...

FlyingFinn · 02-08-2023

Thanks for your help.Show route has entries for both Site-a and Site-b subnets like following:B 10.10.0.0 255.255.0.0 [20/4294967294] via 169.254.0.2, 5d01hS 10.20.0.0 255.255.0.0 is directly connected, Null0and I have following 2 ACL l...

FlyingFinn · 02-08-2023

Yes, same-security-traffic permit intra-interface is in place.Packet-tracer shows drop at VPN. However, I don't consider this is an accurate assessment that I can rely on. I have no issue with VPN traffic between my site and Site-a which is through V...

FlyingFinn · 02-08-2023

Hi Rob:Thank you for your suggestion. I do have NAT exemption rule configured, but that doesn't help.Thanks,Tao

Member Since	‎02-08-2023 12:10 PM
Date Last Visited	‎08-16-2023 12:09 AM
Posts	6
Total Helpful Votes Received	5

User Statistics

User Activity

Cisco ASA VPN traffic not pass-through between tunnels

Re: Cisco ASA VPN traffic not pass-through between tunnels

Re: Cisco ASA VPN traffic not pass-through between tunnels

Re: Cisco ASA VPN traffic not pass-through between tunnels

Re: Cisco ASA VPN traffic not pass-through between tunnels

Re: Cisco ASA VPN traffic not pass-through between tunnels