About johnnykaye

johnnykaye · 09-18-2012

I have a few ASAs with L2Ls in a hub-and-spoke fashion, works great. All ASAs are 8.2(1). I've tried to add remote-vpn to the HQ ASA. I have this working on a PIX 6.3 box at HQ, but have not been able to make it work completely on the ASA. Just to ch...

johnnykaye · 08-15-2012

I have two ASA 5505, 8.2(1), let's call them HQ and BRANCH. HQ has an L2L going towards a third point, and that one works fine. Now I am trying to set up an L2L VPN between HQ and BRANCH. The tunnel comes up (passes phase 1 and 2), but I cannot ping ...

johnnykaye · 09-21-2012

Hello Tony,I have not done SSL vpns, but generally when you get these kind of issues, two common causes are:1. missing route on the inside host/server towards the VPN subnet2. using "any" in crypto-acls and nonat-acls (sometimes you can get away with...

johnnykaye · 09-21-2012

SO, I finally solved it. Long (very long) story short - I removed the "any" ACLs, and put in granular ones pointing to the respective networks at the other ends. Both the nonat, and the crypto-ACL for the main L2L, and in that order. After that, the ...

johnnykaye · 09-20-2012

Hello Portu, sure, here goes:-----------------------------------------HQ# packet-tracer input inside icmp 172.16.106.71 8 0 192.168.17.1 detailPhase: 1Type: ACCESS-LISTSubtype: Result: ALLOWConfig:Implicit RuleAdditional Information: Forward Flow bas...

johnnykaye · 09-20-2012

Thanks Julio, but the ASA does not give the kind of asp drops that come with that bug. So it's something else.The sh asp drop reveals this though:IPSec inner policy mismatch failure (ipsec-selector-failure)Its counter increases at the same rate no ma...

johnnykaye · 09-11-2012

Well done!If you have the time, it would be nice to see the statements before and after, would be more useful to others stumbling across the same issues some other time.Best,Johnny

Member Since	‎05-18-2012 09:28 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	15
Total Helpful Votes Received	9

User Statistics

User Activity

SOLVED: Remote client VPN, traffic one way only

ASA L2L tunnel up, no traffic (or one-way...)

SSL VPN works from inside, but not outside

Re: Remote client VPN, traffic one way only

Remote client VPN, traffic one way only

Re: Remote client VPN, traffic one way only

VPN to VPN NAT, How???