cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
559
Views
0
Helpful
2
Replies

VPN Ipsec routing

AQUALUNGAMERICA
Level 1
Level 1

Morning,

     I have a Cisco 5520 ASA running 8.4(5). When using a VPN ipsec client, and it connects to the LAN, how does the connection interpret traffic on return. At present I have all my servers pointing to the gateway on our old firewall. I have a different gateway on the new Cisco Firewall. It is a transitionary phase as we will permanently have only one firewall the Cisco ASA 5520. For testing purposes, we want to test out the VPN client configuration with our Radius server before we cut over. The test users will need to connect to the resources on the corporate network. Will I need to put a route on the old firewall so when the VPN packets hit the servers they will know how to return to the VPN tunnel or will the source and destination address already be taken into account so when the VPN tunnel hits the server, the packets will return to the tunnel. The VPN Cisco client is not using NAT in its configuration. Once we feel the testing has passed, we will change the gateway of the Cisco ASA 5520 to match the existing gateway for all the resources on the network.

Advice or information would be greatly appreciated?

Thank you

Carlos

1 Accepted Solution

Accepted Solutions

On the ASA you configure an IP-address-pool for the client. This pool should be alligned on subnet-borders. On your infrastructure (central L3-switch or your old firewall) you ace a staric route to the ASA for this pool-network. With that the VPN-answer-packets will flow back to the ASA.


Sent from Cisco Technical Support iPad App

View solution in original post

2 Replies 2

On the ASA you configure an IP-address-pool for the client. This pool should be alligned on subnet-borders. On your infrastructure (central L3-switch or your old firewall) you ace a staric route to the ASA for this pool-network. With that the VPN-answer-packets will flow back to the ASA.


Sent from Cisco Technical Support iPad App

Karsten,

     Appreciate it. Thank you.