ASA Hairpinning Remote VPN users 8.4

[allensurface]

I have set this up on pre 8.3 code and 8.3 code as well. I have the following configured on the ASA, but it is not working and I am not seeing the ASA trying to NAT the VPN pool IP address that the client gets assigned.

object network VPNPool

subnet 192.168.70.0 255.255.255.0

nat (outside,outside) dynamic interface

same-security-traffic permit intra-interface

[Jennifer Halim]

Is this VPN configured with no split tunnel, ie: tunnelall?

Also, is the vpn client try to access the Internet and you were trying to NAT that to the outside IP?

Can you please share a copy of "sh nat" to see if there is any overlaps.

You might also like to run packet tracer and see what is the result.

[Gerry Egan]

Did anyone ever get this working?

[Gerry Egan]

Hi,

Incase anyone else has this problem this worked for me:

object network VPN_UserNet_TunALL

subnet 192.168.23.0 255.255.255.0

nat (outside,outside) source dynamic VPN_UserNet_TunALL interface

same-security-traffic permit intra-interface