Hi
i having issue with VPN and i can see those tunnels are up but im unable to telnet privet IP to port 443
!
object-group network USER-Local-server
host 192.168.1.152
!
crypto isakmp policy 1
encr aes 256
hash sha256
authentication pre-share
group 14
!
crypto isakmp key xxxxxxxxxxx address 200.200.200.12
crypto isakmp key xxxxxxxxxxx address 200.200.200.10
crypto isakmp keepalive 30 periodic
!
!
crypto ipsec transform-set IPSEC_TSET1 esp-aes 256 esp-sha256-hmac
mode tunnel
!
!
crypto map cmap 10 ipsec-isakmp
set peer 200.200.200.12
set transform-set IPSEC_TSET1
match address 109
crypto map cmap 11 ipsec-isakmp
set peer 200.200.200.10
set transform-set IPSEC_TSET1
match address 110
interface FastEthernet3
switchport access vlan 2
no ip address
!
interface Vlan1
ip address 192.168.1.165 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan2
ip address 100.100.100.172 255.255.255.248
ip nat outside
ip virtual-reassembly in
ip tcp adjust-mss 1412
crypto map cmap
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 108 interface Vlan2 overload
ip nat inside source static 192.168.1.152 100.100.100.220 route-map VPN-2-Remote extendable
ip access-list extended Nat-for-VPN
permit ip object-group USER-Local-server host 66.66.72.5
permit ip object-group USER-Local-server host 66.66.62.5
ip access-list extended vpn_charlotte
permit ip host 100.100.100.220 host 66.66.62.5
ip access-list extended vpn_plano
permit ip host 100.100.100.220 host 66.66.72.5
!
route-map VPN-2-Remote permit 10
match ip address Nat-for-VPN
!
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
access-list 109 permit tcp any any
access-list 109 permit ip host 100.100.100.220 host 66.66.72.5
access-list 109 permit ip host 66.66.72.5 host 100.100.100.220
access-list 110 permit tcp any any
access-list 110 permit ip host 100.100.100.220 host 66.66.62.5
access-list 110 permit ip host 66.66.62.5 host 100.100.100.220
