Anyconnect remote access

[Waheed Eladawy]

          Using anyconnect as remote access on ASA for outside, and another FW for LAN

         how to use remote access to reach from LAN, 

     I configure VPN pool range to assign addresses in VPN profiles m but traffic stuck from ASA and not going to LAN FW 

          * route from WAN to Lan exist 

     any ideas, i will be appreciate

[Rob Ingram]

@Waheed Eladawy Do you have a NAT exemption rule, to ensure traffic is not unintentially translated? Example:

nat (inside,outside) source static LAN LAN destination static RAVPN-POOL RAVPN-POOL

[Waheed Eladawy]

yes i have created it like this 

nat (LAN_FW_int,outside) source static LAN_Adresses des static VPN_Addresse_Pool 

note : i use vpn pool subnet not exist on lan fw i depend on existing Routing ro flow traffic to lan fw and then Policy will apply on VPN pool address 

thnx fi=or reply.

[Rob Ingram]

@Waheed Eladawy provide your configuration for review.

Run packet-tracer from the CLI to simulate the traffic flow, provide the output for review.

[Waheed Eladawy]

      shows me that traffic dey by access list deny (implicit) but all traffic from/to  it allowed 

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/112182-ssl-tdg-config-example-00.html