Allowing VPN Network access to specific list

terrencepayet · ‎02-02-2012

Hi guys,

Am still a newbie with the ASA appliance, I've setup my VPN on the cisco ASA 5505 which works perfectly, users from outside can access my internal LAN.

Now what i want, Is to create another VPN Tunnel group with another set of IP in which i want to allow them access to one server inside our LAN. See below details of network

VPN Ip pool: 10.10.10.200-210

Server on LAN: 10.10.10.45

Can this be done??

Thanks in advance.

Terence

Sent from Cisco Technical Support iPad App

ajay chauhan · ‎02-02-2012

Ok so there are multiple ways actually to do this depend upon situation.

1) If users are locally authenticated then you can create ACL call that under group-policy as VPN filter.

For ex,

access-list 104 extended permit ip <10.10.200.0 255.255.255.0>

group-policy xxxx internal

group-policy xxxx attributes

vpn-filter value 104

2) You can configure same thing for users if authenticated locally.

username xxxx attributes
vpn-filter value 104

3) If user auth is configured on ACS then you can also control access by using downlodable access list.

Thanks

Ajay