10-07-2015 06:05 AM
Kindly find the configuration ,
access-list RDP_WMS standard permit host 20.5.6.1
ip local pool POOL1 xx.xxx.x.xx-xx.xxx.x.xx mask 255.255.255.0
group-policy metro internal
group-policy metro attributes
dns-server value 20.5.5.58 20.5.5.46
vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
split-tunnel-policy tunnelspecified
split-tunnel-network-list value RDP_WMS
username user1 password 123456 priv 0
username user1 attributes
vpn-group-policy metro
vpn-simultaneous-logins 1
service-type remote-access
nat (inside) 0 access-list nonat
access-list nonat extended permit ip any 20.0.0.0 255.0.0.0
tunnel-group metro type remote-access
tunnel-group metro general-attributes
address-pool POOL1
default-group-policy metro
tunnel-group metro ipsec-attributes
pre-shared-key 123456
Regards
Arshad AYub
10-07-2015 09:38 PM
is 20.5.6.1 the ip address of the host to which you are trying to RDP into?
if so, please correct your nat exemption access-list:
access-list nonat extended permit ip 20.0.0.0 255.0.0.0 any
10-08-2015 12:07 AM
Dear pjain2 ,
I did according ur suggestion , still same problem .
Shall we checkout traffic of 3389 thru remote vpn
Regards
Arshad Ayub
10-08-2015 12:12 AM
please take captures on the inside interface of the ASA
capture capin interface inside match ip host <assigned ip> host 20.5.6.1
also you are trying to rdp through ip address or the name?
10-12-2015 10:15 PM
EARLIER ISSUE HAS BEEN RESOLVED
PLZ SUGGEST FOR BELOW
2.i want packet-tracer for outside to inside NAT
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide