Using VPN Client to access remote network over L2l

[Thiago Cella]

I´m tring to configure ASA 5505 with VPN Cleint,  to access a remote network over a L2L with another ASA 5505, but no sucess. Is there any special feature to this work?

Follow the topology

tks

[Jouni Forss · Accepted solution]

Hi,

You need to make sure you have the following configured

• same-security-traffic permit intra-interface
  • This will allow the VPN Client traffic to enter the ASA and leave it through the same interface
• If you are using Split Tunnel ACL with the VPN Client, make sure that the ACL has the Remote Site network included
  • If you are using Full Tunnel this wont be an issue
• Make sure that the L2L VPN ACL that defines the "interesting traffic" includes the VPN Client Pool on both sides of the L2L VPN
• Configure a NAT0 on the VPN Client ASA "outside" interface that does NAT0 for VPN Client Pool to Remote Site Network

If you have some actual configuration to share I can try to help with those. Otherwise I can only give some general things like the ones above to check.

- Jouni

[Thiago Cella]

Tks JouniForss!!!

When i configured the command "same-security-traffic permit intra-interface" , the connection worked!

TKS!