cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
432
Views
2
Helpful
3
Replies

Remote access VPN users cannot connect to site.

matthew2587
Level 1
Level 1

We have a site-to-site VPN topology like this:

site 3---------site 1---------site2

We have some remote access users that VPN into the ASA at site 1. They can access site 2 just fine, so I tried to copy the config (changing to relevant networks) to allow the users access to site 3 but it does not work. I am happy to post the config of site 3 for some help.

Thank you!

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame

Make sure VPN users IP allowed in the Tunnel and check Routing part.

Also give us what devices are this  (other than site 1 you mention ASA )? what code running on this ?

Does the Site 3 know the VPN users IP range how to reach back ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Can you share config 

Thanks 

MHM

I was able to get this working, on site 1 I had configured:

nat (inside,outside) source static remote_access_pool remote_access_pool dest static site_3_subnet site_3_subnet

This fixed it:

nat (outside,outside) source static remote_access_pool remote_access_pool dest static site_3_subnet site_3_subnet