Hi,  3 Aug 05 2014 22:38:52   81.111.111.156   82.222.222.38   Deny inbound protocol 50 src outside:81.111.111.156 dst outside:82.222.222.38 Above error log tells me that your ASA is denying protocol 50/esp from 81.111.111.156.  Other thing that I notice, the tunnel is established between 82.x.x.x and 80.x.x.x. Shouldn't it between 82.x.x.x and 81.x.x.x as the returning packet coming from 81.x.x.x? ... View more

You are welcome, thank you for the rates. ... View more

If you connect using AC VPN client, you are connecting to port 443 as AC VPN client is using SSL for connection. Here is an example: ASA# show asp table socket Protocol  Socket    Local Address         Foreign Address         State ---- <output omitted> ---- TCP       00268688  b.b.b.b:22            a.a.a.a:62640     ESTAB SSL       00278f48  b.b.b.b:443           a.a.a.a:64909     ESTAB SSL       0027e738  b.b.b.b:443           a.a.a.a:57641     ESTAB SSL       00285998  b.b.b.b:443           a.a.a.a:61188     ESTAB SSL       00291168  b.b.b.b:443           a.a.a.a:27885     ESTAB SSL       002a1628  b.b.b.b:443           a.a.a.a:62408     ESTAB ASA#  ASA# show conn all   6 in use, 224 most used TCP outside a.a.a.a:64603 NP Identity Ifc b.b.b.b:443, idle 0:00:18, bytes 2958, flags UOB TCP outside a.a.a.a:54098 NP Identity Ifc b.b.b.b:443, idle 0:00:30, bytes 9338, flags UOB TCP outside a.a.a.a:37676 NP Identity Ifc b.b.b.b:443, idle 0:00:35, bytes 1609, flags UOB TCP outside a.a.a.a:57829 NP Identity Ifc b.b.b.b:443, idle 0:00:35, bytes 1257, flags UOB UDP outside a.a.a.a:23174 NP Identity Ifc b.b.b.b:4500, idle 0:01:37, bytes 453, flags - TCP outside a.a.a.a:62640 NP Identity Ifc b.b.b.b:22, idle 0:00:00, bytes 59676, flags UOB If you connect using old Cisco VPN client, you are connecting to port 500 as Cisco VPN client is using IPSEC for connection. Here is an example: ASA# show conn all         3 in use, 224 most used UDP outside a.a.a.a:15388 NP Identity Ifc b.b.b.b:4500, idle 0:00:13, bytes 2594, flags - UDP outside a.a.a.a:54950 NP Identity Ifc b.b.b.b:500, idle 0:00:55, bytes 1317, flags - TCP outside a.a.a.a:62640 NP Identity Ifc b.b.b.b:22, idle 0:00:00, bytes 106888, flags UOB Above are standard default ports for VPN clients. So you shouldn't be connected to port 10000 on ASA unless you changed the default ports value. HTH, ... View more

Yes, you will need to disconnect one first before able to connect with PC #3. You will see an error on the ASA if you try to connect with PC #3 while #1 and #2 are still connected.  ... View more

yes, you should be able to connect to inside interface of the ASA. If it's not working, are you to ping the inside interface at least? (don't forget to enable icmp first) And out of curiosity, are you able to connect/access the LAN behind the ASA? ... View more