SSL VPN not working with static nat ip

[CSCO11520436]

Hi All,

I have my SSL-VPN (SONICWALL) box behind Cisco ASA box, I have done the Static NAT for the SSL BOX Im able to ping the box from internet, but not able to login to the ssl vpn webpage. Previously SSL box was working with the static public ip.

Any suggestions would be great

[Jennifer Halim]

Do you have SecurityK9 as well as the SSL license installed on your 3900 router?

please share the output of "show license"

[CSCO11520436]

HI Jennifer,

i have the Evaluation license file in my router. I got the same from licensing@cisco.com

[Jennifer Halim]

can you pls share the output of "show license", you can remove the serial#

[CSCO11520436]

Hi Jennifer,

RTR#sh license

Index 1 Feature: ipbasek9                      

    Period left: Life time

    License Type: Permanent

    License State: Active, In Use

    License Count: Non-Counted

    License Priority: Medium

Index 2 Feature: securityk9                    

    Period left: 625 weeks 4  days

    Period Used: 7  weeks 6  days

    License Type: Evaluation

    License State: Active, In Use

    License Count: Non-Counted

    License Priority: Low

Index 3 Feature: uck9                          

    Period left: 617 weeks 0  day 

    Period Used: 7  weeks 6  days

    License Type: Evaluation

    License State: Active, In Use

    License Count: Non-Counted

    License Priority: Low

Index 4 Feature: datak9                        

    Period left: 625 weeks 0  day 

    Period Used: 0  minute  0  second 

    License Type: Evaluation

    License State: Active, Not in Use, EULA accepted

    License Count: Non-Counted

    License Priority: Low

Index 5 Feature: gatekeeper                    

    Period left: Not Activated

    Period Used: 0  minute  0  second 

    License Type: Evaluation

    License State: Not in Use, EULA not accepted

    License Count: Non-Counted

    License Priority: None

Index 6 Feature: LI                            

Index 7 Feature: SSL_VPN                       

    Period left: Life time

    License Type: Permanent

    License State: Active, In Use

    License Count: 100/100/0  (Active/In-use/Violation)

    License Priority: Medium

Index 8 Feature: ios-ips-update                

    Period Used: 0  minute  0  second 

    License Type: Evaluation

    Start Date:         N/A, End Date: Dec 31 2025

    License State: Not in Use, EULA not accepted

    License Count: Non-Counted

    License Priority: None

Index 9 Feature: SNASw                         

    Period left: Not Activated

    Period Used: 0  minute  0  second 

    License Type: Evaluation

    License State: Not in Use, EULA not accepted

    License Count: Non-Counted

    License Priority: None

Index 10 Feature: hseck9                        

Index 11 Feature: cme-srst                      

    Period left: Not Activated

    Period Used: 0  minute  0  second 

    License Type: Evaluation

    License State: Not in Use, EULA not accepted

    License Count: 5000/0/0  (Active/In-use/Violation)

    License Priority: None

Index 12 Feature: WAAS_Express                  

    Period left: Not Activated

    Period Used: 0  minute  0  second 

    License Type: Evaluation

    License State: Not in Use, EULA not accepted

    License Count: Non-Counted

    License Priority: None

any suggestions?

[Jennifer Halim]

Looks ok to me..

Might want to run debug on the router and see why it's failing.

[CSCO11520436]

Hi Jennifer,

what are the commands output you required?

[Jennifer Halim]

debug webvpn trace

[CSCO11520436]

Hi Jennifer,

Command not working.