Dear all, I am new to security issues and I have a complicated scenario.
I changed the IP addresses so as not to expose the network, but the scenario is complete.
I have 2 branches in Brazil that communicate via LAN-to-LAN.
Wherever I close the VPN (AnyConnect) here in Brazil, I can access my internal network normally (122.122.122.122).
However, in this same scenario I have a closed IPsec tunnel with the peer in Colombia (133.133.133.2), the tunnel is working without problems.
However, the client in Colombia cannot access the addresses on my internal network.
I have already checked all the network configurations, and even so, since it was working and we did not change anything on our side, I do not know how to help. I did not want to create separate ACLs.
1 - Because it is an AnyConnect from another location, the user did not appear in the results of my "show vpn-sessiondb anyconnect".
But I did not find any errors, and all the addresses from Colombia are specified in my firewall and in crypto isakpm sa. The only difference is that the Anyconnect there has the peer address as 133.133.133.1 and the mask it received the IP from is 111.111.111.x 255.255.252.0 and in crypto and in my firewall rules they are 111.111.111.0 255.255.248.0, but I understand that it is included.
I will share the summarized configurations and those of you who have experience here in the community, do you think you can help me by observing?
Config Brazil 1 Inside
Config Brazil 1 Colombia Router
