cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1693
Views
0
Helpful
34
Replies
Highlighted
Hall of Fame Master

Re: Cisco asa vpn ipsec connected to cisco 887vaw

Hamid

 

I see this in the config

 

ip access-list extended LAN
permit ip any any

I suggest that you remove the permit any any from the ACL.

 

I wonder if anything shows up in the logs on the router when you attempt to start the VPN from an Internet source?

 

Perhaps it might show us something helpful if you turn on debug for address translation on the router and then attempt to start the VPN from an Internet source, and then look for any debug output.

 

HTH

 

Rick

HTH

Rick
Highlighted
Beginner

Re: Cisco asa vpn ipsec connected to cisco 887vaw

Hi Richard

Thank you very much for your reply.

It is working with removing  permit ip any any, but I loose internet connection for the router.

any solution for that please ?

 

Kind Regards

 

Hamid

 

Highlighted
Beginner

Re: Cisco asa vpn ipsec connected to cisco 887vaw

Hi Richard

The router internet connection is working by add ip permit vlan 1 network address.
Thank you very much fro your great help.

Best Regards
Hamid
Highlighted
Hall of Fame Master

Re: Cisco asa vpn ipsec connected to cisco 887vaw

Hamid

 

I am very glad to know that you have resolved this issue and that it is working.

 

HTH

 

Rick

HTH

Rick

View solution in original post

Highlighted
Beginner

Re: Cisco asa vpn ipsec connected to cisco 887vaw

Hi Richard,
The internet is working by adding ip permit for vlan1 network address.
Thank you very much for your great help.

Kind Regards

Hamid