hello all,
We have a strainge situation with anyconnect plus remote access. We have FTD and OUtsid Interface (10.10.10.2) , DMZ (10.33.162.0/23) and Inside (192.168.1.0/20). We did the all initial configuration. Infront of ASA ouside interface its a router that is managed for other company, so when o client go to internet via Outside tooks X1 public ip. When go to internet from Internal was a PAT and took X2 public ip. So anyconnect working fine if i use spittunnel. But because some systems allow access only for X2 public ip we thing that we must use full tunnel. So when we configure full tunnel we add the 2 bellow NAT rules
Static inside-zone outside-zone Internal_LAN VPN_Pool Internal_LAN Vpn_pool (no proxy, no route)
Dynamic outside-zone outside-zone VPN_pool Satic_Public
also existing a PAT NAT internal to outside PAT_pool
this worked and users can access internet woith public X2 but... after a few days we had errors DHCP FULL. and thousand of BAD ADDRESSES. After investigation when disabled the NAT this error stop occuring.
What is the wrong ?? How to use the Public X2 without having issueS? CAn you write me the correct NAt rules if those i used are not correct?
ASA firepower ver 6.2.3 and one more question , if i want to update this to the latest can i do it direct or i must update one version at a time?
thanks
