07-11-2017 05:06 AM - edited 02-21-2020 09:21 PM
This seems a basic question but I'm having a bad day and can't find the answer.
What are the configuration options for a data path between two AnyConnect (SSL) clients? It is primarily for jabber calls to remote clients and I'm sure this has worked already but it isn't now (don't let that confuse things).
2 x clients connected to the same ASA and getting client addresses from the same client pool (172.16.151.x) cannot ping each other and cannot get an audio / video path through.
ASA 9.6(2.11)
AC client - Mac 4.3.05017
AC client iPhone 4.0.05069
I have tried using packet capture on the ASA for any communication between the client subnet and nothing shows.
I have also tried tunnel all and split tunnel configurations.
Is there anything I am missing, basic or otherwise?
07-11-2017 05:42 AM
Update
I have updated the iPhone client to the non-legacy version and I now get 1 way audio / video. The version is 4.0.07074 now.
Audio/video - Mac to iPhone - OK
Audio/video iPhone to Mac - nothing.
Still no ping in either direction.
07-12-2017 08:24 AM
There are a few things you need to check for this to work. Looking at your one way audio issue, it could be that your NAT is set up incorrectly. A similar setup is shown in the guide below:
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100918-asa-sslvpn-00.html#anc14
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide