Redirect Single IP Address Through User VPN

[nlambert9]

Hi All,

I am having an issue with the user VPNs. For users connected via the AnyConnect VPN client, all of their Internet traffic goes out their local Internet connection, since I am using split tunneling. However, I need a specific public IP address to go through the VPN tunnel and out the DIA at the main office, rather than the user's local internet connection. I managed to have this IP address go through the tunnel to the ASA at the main office, but it appears that it gets blocked somewhere there, or maybe the return traffic gets blocked. I am using an ASA 5520 at the main office, with software version 8.3. Can someone help me out?

Thanks!

[Javier Portuguez · Accepted solution]

Hi Nathalie,

This is what you need:

network object vpn-pool

     subnet 192.168.1.0 255.255.255.0

!

network object external-server

     host 7.7.7.7

!

nat (outside,outside) 1 source dynamic vpn-pool interface destination static external-server external-server

same-security-traffic permit intra-interface

That should allow the U-turning on the outside interface, so the clients get out to the Internet with the outside IP of the FW when try to reach the 7.7.7.7 server.

Let me know.

Thanks.

Portu.

Please rate any post you find helpful.

[nlambert9]

Thank you very much Portu, that was exactly it! I was missing the NAT statement. It is working just fine now.

Thanks again,

Nathalie

[Javier Portuguez]

Awesome news

You are very welcome!

Have a good one.

Portu.