webvpn-svc action - drop

[jeremie.dikazolele]

Hello team

I have an issue with vpn any connect.

everything worked well before and suddenly I learn from users that they can no longer reach the network when they connect to the vpn. nothing was changed at my level. I had to do the packet tracer test, I see this error, webvpn-svc action - drop. what can cause that?

[balaji.bandi]

Looks to me high level there may be ACL Missing allowing users to connect Lan resources, just try to add ACL entry VPN users IP to allow Lan IP address range and test it.

here is packet flow :

https://www.petenetlive.com/KB/Article/0001298

still, issue post the config (by removing confidential information) and give us the user IP and Lan IP which failing.

[jeremie.dikazolele]

Spoiler

Hello dear balaji,

I have added the access-list-in on the outside interface but I got the same issue. I will share the configuration tomorrow morning. 

[balaji.bandi]

Ok sure post the config also gives us input web VPN IP trying to access local resources. example.

[jeremie.dikazolele]

hello Dear Balaji

thanks for your attention to my request,

it's fine now, i have added the route of my pool in my second firewall which is connected directly on the vpn firewall.

best regards,

[balaji.bandi]

Glad all working can we mark this as resolved,

[jeremie.dikazolele]

Yes balaji