Cisco ASA 5505 VPN passthrough

[bavo]

Hi,

@home i`f installed a Cisco asa 5505 because the provider has the cable modem in transparant mode. So i have the public IP address at my firewall.

Also for training because we have asa`s at work. So i have more feeling with it.

but sometimes i need to build a VPN session to a server at work. But i`m not getting a connection to the server. If i remove the ASA 5505 then the connection to the work server is great. But if de ASA 5505 is back on its place . it is not allowing  VPN session to the outside world.

Could someone point me in the right direction?

It is possible to build a VPN connection from outside to the Cisco ASA5505.

Thanks in advanced

Greetings

Palermo

[Seb Rupik · Accepted solution]

Hi Palermo,

You didn't mentioning the type of VPN connection you are using.

If it is PPTP then you will need to inspect the traffic for the ASA to allow it back in from 'outside'. Try the following config:

!
class-map inspection_default
  match default-inspection-traffic
!
policy-map global_policy
  class inspection_default
    inspect pptp
!
service-policy global_policy global
!

cheers,

Seb.

[bavo]

Seb Rupik,

Thanks for your help.

The code you gave me works.

Indeed its a PPTP connection. 

Still working out the command to understand it.

Again thanks

Greetings

Palermo