Specific SSL VPN IP in public IP range on an ASA 5515

[Albeck]

Hello,

I have an /29 public subnet on my outside interface of my cisco ASA 5515-X (version 9.5.1) and I want to configure remote VPN access to use a single, specific IP address within this range. However, when i set up the remote vpn access, i can only specify an interface. The result of that, is, that the VPN server of the ASA listens only on the configured IP address of the interface and not on any other IP adress in the same subnet.

So is there any possibility to specifiy an IP adress for VPN access?

As a workaround I thought about configuring an extra interface with the prefered IP address of the subnet. But this is not possible and results in an error because the ASA says that the IP/net of the workaround interface overlaps with the existing subnet of my /29 interface.

So how can I use all the IPs in my /29 subnet, when I am only able to configure one interface with only one IP address?

Thanks, Albeck.

[Karsten Iwen]

All services that are provided by the ASA (that includes VPN) are only handled by the interface address (that's by design of the ASA and not configurable). The other addresses can be used with NAT for internal systems.