cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
168
Views
0
Helpful
1
Replies
Highlighted

ASA5510 Client VPN no UDP

We have setup a connection between the Cisco client on a laptop and a Cisco ASA 5510.

The tunnel is working allright when I'm using an open tunnel (no firewall in Group Policy).

But when I apply an ACL to the VPN connection (Group Policy) there can't go any UDP traffic through the tunnel. TCP connection are working well.

Here is my ACL:

access-list ipsec_homeworkers remark DNS requests

access-list ipsec_homeworkers extended permit udp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq domain

access-list ipsec_homeworkers remark TTCP test tool

access-list ipsec_homeworkers extended permit udp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq 5001

access-list ipsec_homeworkers remark TTCP test tool

access-list ipsec_homeworkers extended permit tcp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq 5001

access-list ipsec_homeworkers remark RDP

access-list ipsec_homeworkers extended permit tcp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq 3389

access-list ipsec_homeworkers remark Kerberos poort 88

access-list ipsec_homeworkers extended permit tcp 10.10.10.0 255.255.255.0 192.168.0.0 255.255.255.0 eq 88

access-list ipsec_homeworkers remark Netbios name services

access-list ipsec_homeworkers extended permit udp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq netbios-ns

access-list ipsec_homeworkers remark Netbios datagram services

access-list ipsec_homeworkers extended permit udp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq netbios-dgm

access-list ipsec_homeworkers remark Netbios session services

access-list ipsec_homeworkers extended permit tcp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq netbios-ssn

access-list ipsec_homeworkers remark Netbios over TCP

access-list ipsec_homeworkers extended permit tcp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0 eq 445

access-list ipsec_homeworkers extended permit icmp 10.10.0.0 255.255.255.0 192.168.0.0 255.255.255.0

Does anybody know how to solve this problem?

With kind regards,

Rene Eijzenga

1 REPLY 1
Highlighted
Beginner

Please post your complete configuration.

Thanks!

Content for Community-Ad