SSL VPN ISSUE

[sarojpradhan]

I have configured SSL VPN on the Cisco Asa 5510 FW  and   was working fine but from now when the  user  tried connecting the VPN by   ssl vpn client able to connect the VPN.But unable to access internet and Local network .

Please advice with command to run.

thanks,

Saroj

[PAUL GILBERT ARIAS]

This might be caused by a missing split tunneling config

Sent from Cisco Technical Support iPhone App

[Jesse Shumaker]

two things

1. Howto: http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080975e5d.shtml

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/svc.html

2.

split tunnel setup

     access-list split-tunnel standard permit 192.168.0.0 255.255.255.0


Setup the nonat ACL so that traffic from the remote VPN network to your  vpn client is not NATed

     access-list nonat extended permit ip 192.168.0.0 255.255.255.0  10.10.10.0 255.255.255.0
     access-list nonat extended permit ip 10.10.10.0 255.255.255.0  192.168.0.0 255.255.255.0

tie in the split tunnel to your group policy


     group-policy VPNClients attributes
         vpn-tunnel-protocol webvpn
         split-tunnel-policy tunnelspecified
         split-tunnel-network-list value split-tunnel