cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1037
Views
0
Helpful
2
Replies

ASA 8.2 No Split Tunnel, NAT for internet not working

corey.mckinney
Level 1
Level 1

I'm configurig a VPN profile with NO split tunneling. The tunnel is working to the inside, but I'm not able to get internet access. Below are the NAT statements that I created.

nat (outside) 2 0.0.0.0 0.0.0.0

global (outside) 2 (ip address)

I'm familiar with 8.6 nat statements, but with 8.2 it's not letting me put in the same commands.

Can someone please point out what I'm doing wrong?

Thanks,

Corey    

1 Accepted Solution

Accepted Solutions

Jouni Forss
VIP Alumni
VIP Alumni

Hi,

I would suggest configuring the "nat" statement with the actual VPN networks. Though that is not the problem but just a suggestion


I would imagine that you might be missing this configuration

same-security-traffic permit intra-interface

This will allow the VPN Client traffic to enter the "outside" interface and also leave it towards Internet.

Hope this helps

Remember to mark the reply as the correct answer if it answered your question or ask more

- Jouni

View solution in original post

2 Replies 2

Jouni Forss
VIP Alumni
VIP Alumni

Hi,

I would suggest configuring the "nat" statement with the actual VPN networks. Though that is not the problem but just a suggestion


I would imagine that you might be missing this configuration

same-security-traffic permit intra-interface

This will allow the VPN Client traffic to enter the "outside" interface and also leave it towards Internet.

Hope this helps

Remember to mark the reply as the correct answer if it answered your question or ask more

- Jouni

Thanks! I forgot the same-security-traffic permit intra-interface

Works good now. Much appreciated.