Anyconnect - Can't access internal resources

[schiavone13]

I've been trying to configure a remote VPN with AnyConnect but can't seem to access the internal network when I connect. I think its a NAT issue any help would be greatly appreciated. 

[nkarthikeyan]

Hi,

Try like the below.

Remove these NAT rules:
========================
nat (inside,outside) source static any any destination static obj-10.2.2.0 obj-10.2.2.0 no-proxy-arp route-lookup
nat (outside,inside) source static obj-10.2.2.0 obj-10.2.2.0

Add like the below
====================
object network OBJ-ANYCONNECT-SUBNET
range 10.2.2.2 10.2.2.3
nat (inside,outside) 2 source static any any destination static OBJ-ANYCONNECT-SUBNET OBJ-ANYCONNECT-SUBNET no-proxy-arp route-lookup
!

Regards

Karthik

[schiavone13]

Karthik

Thanks for the help. It looks like it was working with the original first NAT statement but I was trying to ping the internal resources which does not seem to be allowed. When I try to connect to a file share it works though so I am able to access internal resources. 

I have removed this statement as it was not needed. 

nat (outside,inside) source static obj-10.2.2.0 obj-10.2.2.0

Thank you 

L