About jmbrewer9x

jmbrewer9x · 02-28-2020

Setup an ACL on a 3560 to try to accomplish this. Below is the ACL I have so far, but it doesn't seem to accomplish this.5 permit ip host 192.168.1.245 192.168.5.0 0.0.0.255 10 deny ip 192.168.5.0 0.0.0.255 192.168.1.0 0.0.0.255 20 deny ip 192.168...

jmbrewer9x · 08-11-2017

Used ADSM Startup Wizard and VPN Wizard to setup a 5508 X. I'm trying to get the Anyconnect SSL VPN client to work. After the setup I tried the command sysopt connection permit-vpn to enable inside access from the VPN pool. Still didn't seem to do an...

jmbrewer9x · 08-03-2017

I'm trying to set this up using only the Outside interface (nothing attached to inside at all) I've got the VPN setup and I can connect to it from the outside, but I go no where after connecting. I can ping the inside address of the ASA, but nothing ...

jmbrewer9x · 08-13-2017

I added a few of the commands from that page that I did not have. That seemed to get split tunnel working correctly. However I still cannot access my inside lan when I connect with the VPN. Do I need any additiona firewall rules on the inside or outs...

jmbrewer9x · 08-04-2017

Okay so I gave this a try, but it didn't seem to work. I also tried just putting the vpn pool into a totally separate subnet. Below is what I did. I did the first command as you suggested. object network inside subnet 192.168.1.0 255.255.255.0 (I j...

jmbrewer9x · 08-04-2017

Yes correct that is how the network is setup. Instead of the route statement you have I already had one in place pointing to my gateway on lan (192.168.1.1, this is the IP of the router/firewall) The outside interface of the 5508 is that 192.168.1.1...

jmbrewer9x · 08-04-2017

Oh ok...sorry I see what your saying now. I'm creating the "inside" with that first command. Sorry it's too early and the caffeine hasn't kicked in yet. :) I'll give this a try.

jmbrewer9x · 08-04-2017

I apologize Richard, I incorrectly said I could ping the inside interface of the ASA, I should have said outside. The outside interface is 192.168.1.100. So would the above still be good? Also I don't have anything setting on the inside interface. Cu...

Member Since	‎08-03-2017 04:51 PM
Date Last Visited	‎03-04-2020 12:17 AM
Posts	8

User Statistics

User Activity

Allow ingress traffic from specific IP to VLAN, but block all egress traffic from VLAN.

Unable to access inside network from Anyconnect SSL VPN after initial setup of 5508 x ASA

Using ASA only as a VPN appliance behind a different router/firewall

I added a few of the commands

Okay so I gave this a try,

Yes correct that is how the

Oh ok...sorry I see what your

I apologize Richard, I