cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1171
Views
0
Helpful
2
Replies

SSL VPN IP Address Other than interface IP Address???

Mudasir Abbas
Level 1
Level 1
Hi,

Is it possibe to use a differnt IP Address from the same Subnet of OUTSIDE
INTERFACE? Instead of Interface IP Address itself. The Idea behind is,
Clients should not use OUTSIDE Interface IP Address for SSL VPN, but whereas they can
use from the IP Address Pool of OUTSIDE Interface.


Regards

Mudasir Abbas

1 Accepted Solution

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

If the SSL is terminated on an ASA firewall, you can't terminate it on any other ip address but the outside interface.

If it is terminated on an IOS router, yes, you can use a different ip address to terminate the SSL VPN connection.

Hope that answers your question.

View solution in original post

2 Replies 2

Jennifer Halim
Cisco Employee
Cisco Employee

If the SSL is terminated on an ASA firewall, you can't terminate it on any other ip address but the outside interface.

If it is terminated on an IOS router, yes, you can use a different ip address to terminate the SSL VPN connection.

Hope that answers your question.

Thanks