Client VPN to access remote networks via ASA L2L connections

[tngceo]

I have an ASA 5520 with Cisco 5.X VPN clients. The ASA also has a number of permanent IPSEC L2L connections to other offices. I need the client VPN users to be able to access the remote networks via the ASA.

I added the remote networks to the split tunnels list for the client VPN policy, And I now see the networks in the client route list. But the clients cannot pass traffic to/from the remote networks. Do I also need to create outside to outside NAT Exemption rules? It's a little confusing to me, since the clients are getting an inside virtual IP from the assigned pool.

[Michael Muenz]

Yes, you need a NAT exemption. You can turn on debugging on the ASA and should get Asymetric NAT errors.

Michael

Please rate all helpful posts