cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
284
Views
0
Helpful
1
Replies
Highlighted
Beginner

AnyConnect clients traffic can't go to IPsec tunnel

Hello, we have quite simple setup.

 

(LAN1) - (ASA1) - (IPsec Tunnel) - (ASA2) - (LAN2)

 

We have AnyConnect clients on ASA1. That clients should have access to LAN1 and LAN2.

Recently we upgraded our ASAs to 9.7(4) version to get Tunnel interfaces.

With crypto maps it worked pretty well, but after moving to Tunnel interfaces AnyConnect clients can't get to LAN2 anymore. They still have connection to LAN1 though.

 

LAN2 is accessible from LAN1 without any problems.

ASA2 has route to AnyConnect clients network through Tunnel interface.

 

When I shutdown Tunnel interfaces and create crypto maps back that it works.

 

What could be the problem?

1 REPLY 1
Highlighted

Hi,

Whithout see config is impossible to say anything.