cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1070
Views
5
Helpful
2
Replies

Cisco ASA 5505 Anyconnect | Hide Public IP

Net_Stef
Beginner
Beginner

Hello all,

 

I have an ASA 5505 which is connected to my ISP router.

When i connect via Any connect, i cannot obtain the public IP of my ISP. I have configured the following SPLIT access-lists:

access-list SPLIT standard permit 10.10.1.0 255.255.255.0
access-list SPLIT standard permit 10.10.2.0 255.255.255.0
access-list SPLIT standard permit 10.10.3.0 255.255.255.0
access-list SPLIT standard permit 10.10.4.0 255.255.255.0
access-list SPLIT standard permit 10.10.5.0 255.255.255.0
access-list SPLIT standard permit 10.10.6.0 255.255.255.0
access-list SPLIT standard permit 10.10.7.0 255.255.255.0
access-list SPLIT standard permit 10.10.8.0 255.255.255.0
access-list SPLIT standard permit 192.168.1.0 255.255.255.0
access-list SPLIT standard permit any4

 

I have also uploaded the configuration file. What might be the issue?

 

Regards,

Stef

1 Accepted Solution

Accepted Solutions

Marvin Rhoads
Hall of Fame
Hall of Fame

Why use split tunnel if you want all traffic to go over VPN?

Does your upstream "ISP" know to route traffic to your VPN pool (10.10.5.0/24) back via the ASA outside interface?

View solution in original post

2 Replies 2

Marvin Rhoads
Hall of Fame
Hall of Fame

Why use split tunnel if you want all traffic to go over VPN?

Does your upstream "ISP" know to route traffic to your VPN pool (10.10.5.0/24) back via the ASA outside interface?

Thanks Marvin,

 

i removed the following:

no split-tunnel-policy tunnelspecified
no split-tunnel-network-list value SPLIT

 

and i added the following NAT:

nat (OUTSIDE,OUTSIDE) after-auto source dynamic VPN_POOL interface

 

Now i can see ISP public IP from whenever i login to Anyconnect.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: