Hi
I have a authentication chalenge on my ASA.
I have site to site IPSec VPN between to offices of one company. Everybody can communicate to each other, everything is open between those two subnets. In addition on local ASA remote users use remote-access vpn to connect to local ASA and that's ok. They are being authenticated against local user database.
But if I want to set up authentication of those users against one remote MS AD server, remote means it is in the remote subnet, I don't get reply from remote server at all. I can see that ASA uses IP addr of external interface as its src IP and doesn't further through the VPN tunnel.
I have tested it: if I simply ping remote server IP, it doesn't reply, but if I use extended ping, and inside interface as source, it works. And it totally makes sense.
But can I somehow make my local ASA to use internal interface as its src IP?
10x in advance
Zoran
