0
votes
1answer
20 views

How to avoid hairpin VPN on cisco

I currently have a hairpin VPN setup with a Cisco ASA, but I'm not very happy as it messes up service access that are on ASA external IP address and are NAT'ed inwards :( How should I re-design the ...
0
votes
1answer
20 views

Cisco ASA IPSec VPN - service discovery (e.g. shared folder browser)

We have an ASA 5505 doing IPSec VPN for remote users. Client access is working almost as expected:clients can reach hosts on the internal LAN, even using DNS, and we are tunneling all client traffic ...
0
votes
0answers
30 views

Preserving VPN Flow on ASA + netsh

I have a tcp connection established over a site-site VPN and when the VPN drops it causes errors on the client when sending after the tunnel is re-established. When having this problem before, ...
3
votes
1answer
67 views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
0
votes
0answers
74 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
-1
votes
1answer
89 views

ASA stops internet when connected to VPN - firmware 9.x

I'm having issues setting up Remote access VPN on Cisco ASA (firmware 9.1) i'm able to connect via the VPN and access all internal resources but i'm not able to access internet when connected to the ...
2
votes
0answers
42 views

How to allow vpn users to access only specific servers?

Currently we have an ASA with an IP pool to allow an outside contractor to remotely connect and access our network. What we would like to do is limit what they can get to once they are connected. I ...
2
votes
3answers
198 views

VLAN over VPN (ASA 5520)? if not any other options available?

Is it possible to extend the local VLANs to a Remote site connected by IPSEC VPN using ASA 5520 / Cisco 1841 DSL router. can we have many VPN tunnels between the ASAs? (from every VLAN one vpn ...
-1
votes
1answer
48 views

IPsec VPN Server behind Cisco ASA (Transparent mode)

I've a Cisco ASA 5510 with transparent mode, and I'm going to setup a IPsec VPN(Openswan) in a internal linux server(with Public IP). This server has 2 NIC, 1 public IP, and 1 internal IP. I've ...
1
vote
0answers
271 views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
1
vote
1answer
44 views

Cisco ASA crypto keys, SSH, and VPN

I'm new to the ASA and wanted to know if regenerating crypto keys on an existing ASA with established VPN tunnels could negatively affect the tunnels. The reason for wanting to regenerate crypto keys ...
0
votes
1answer
132 views

Setup IPsec VPN using ASA5505 behind Juniper SSG5

I have been assigned to establish a Internet IPsecVPN connection between two sites using Cisco ASA5505 A site currently has following setup.(Same setup is expected in another site) Internet----->ADSL ...
0
votes
1answer
51 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
1
vote
0answers
122 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...
0
votes
0answers
46 views

Cisco Firewalling traffic on Site-to-Site VPN

So with Cisco's, ASA 5505 at one end, 5510 at the other, a Site-to-Site VPN is configured. SiteA and SiteB. Now it get's complicated as their are VLANs both sides, several in fact, but this is working ...
0
votes
0answers
37 views

NPS connection for IPSec Vpn takes a long time to establish

After changing my NPS server my IPSEC VPN connection from the ASA takes ~15 seconds to establish a VPN connection. This was almost instant previously. I exported the NPS configuration from the ...
2
votes
1answer
161 views

VPN Failover Cisco ASA 5505

So basically we have a Cisco ASA 5505 (we have inherited this from a customer, none of us have any experience with Cisco's). Now essentially we have to WAN lines which we have setup in Failover, via ...
0
votes
1answer
134 views

How do you configure a Lan to Lan VPN on an ASA without using your outside interface IP address?

I have two /28 subnets A & B. My PIX and ASA's outside interface addresses are both in subnet A. I am in the middle of a migration from the PIX to the ASA and need to use the PIX outside ...
4
votes
1answer
2k views

Strongswan vpn tunnel connected but the traffic is not routed through it

I have just set up a vpn tunnel site-to-site with strongswan (4.5). The tunnel looks fine and connected to the other side, but seems there is a problem routing traffic through the tunnel. Any idea? ...
0
votes
0answers
260 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
3
votes
0answers
105 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
3
votes
2answers
3k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
0
votes
0answers
69 views

Looking for Tutorial on establishing site to site VPN from a Cisco ASA 55XX to a Sonicwall NSA 4500 - with DHCP over VPN

We use an NSA 4500 for our central network edge. One of our sites shares an ASA 55XX (not sure of exact model yet) with a cohabitant and they would like to use it, if they can, to establish a VPN ...
0
votes
1answer
299 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
1answer
88 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
1
vote
1answer
910 views

Fail-over VPN with two ISPs and Cisco ASA 5500 Series

We have a couple of branch offices that need to connect to a main site. We plan to use Cisco ASAs 5515 to establish VPN connections. We would also like to have 2 ISPs at each location to make the ...
2
votes
1answer
160 views

Allowing multiple IP addresses for a single VPN user

Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend. User authenticatin is based on the group password, user password ...
0
votes
1answer
120 views

Cisco ASA 5505 in small office configuration

I have a small office network that currently consists of about 10 machines, a gigabit switch, and a router/firewall, in a fairly obvious configuration. I need to add a Cisco ASA 5505 to support a VPN ...
2
votes
1answer
266 views

ASA 5505 VPN setup. VPN works but still unable to reach devices in the inside network.

I've setup a Remote Access VPN on my Cisco ASA 5505. I'm able to connect to my ASA via my phone or the Cisco client, but I'm unable to reach devices in my inside LAN when connected via VPN. The ...
0
votes
1answer
328 views

Cisco ASA 5510 VPN Dropping RDP Sessions

We have a Cisco ASA 5510 (47-7523-01 Rev A0) that we are using so that users can connect to the VPN from home. I use this connection myself to do late night backups on our old database systems that ...
0
votes
2answers
530 views

Exposing the AnyConnect HTTPS service to outside network

We have a Cisco ASA 5505 with firmware ASA9.0(1) and ASDM 7.0(2). It is configured with a public ip address, and when trying to reach it from the outside by HTTPS for AnyConnect VPN, we get the ...
-1
votes
2answers
247 views

Cisco ASA - Restrict IP for WebVPN access

I've got a Cisco ASA5510 with Firmware Version 8.0(5). I'd like to restrict the source IPs that are allowed to access the Router through WebVPN (port 443). Here is the relevant part of the config. ...
0
votes
0answers
109 views

Cisco ASA VPN Authentication

we're providing VPN Services to our Users through the Cisco ASA 5500 Series. As of now , the users can access VPN from any Client Machine. I want to allow VPN Access only to machines with particular ...
2
votes
1answer
344 views

Cisco ASA dropping IPsec VPN between istself and CentOS server

Currently we're trying to set up an IPsec VPN between a Cisco ASA Version 8.0(4) and a CentOS Linux server. The tunnel comes up successfully, but for some reason that we can't figure out, the ...
0
votes
2answers
1k views

Outside VPN traffic not able to ping site-to-site VPN remote site

we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly. Site/Subnet A: 192.100.0.0 - local (8.4(4)) Site/Subnet B: 192.200.0.0 - ...
1
vote
1answer
794 views

ASA 5505 stops local internet when connected to VPN

I have a Cisco ASA router running firmware 8.2(5) which hosts an internal LAN on 192.168.30.0/24. I have used the VPN Wizard to setup L2TP access and I can connect in fine from a Windows box and can ...
1
vote
1answer
287 views

Skype performance in IPSEC VPN

I've been challenged to "improve Skype performance" for calls within my organisation. Having read the Skype IT Administrators Guide I am wondering whether we might have a performance issue where the ...
1
vote
0answers
429 views

Partial VPN connections on Cisco ASA

Cisco ASA 5505 in remote site, connecting as Easy VPN client to ASA 5510 at HQ. VPN light is green, and sh crypto isakmp sa shows active security association. However connectivity to some of our ...
1
vote
0answers
421 views

Connecting to a Cisco ASA 5510 with Win 7 VPN client

Is it possible to configure a Cisco ASA 5510 to accept a connection from Windows 7 with the built in VPN client software in Win7 ? I know this question has sorta-been asked before on SF but I'm ...
1
vote
3answers
397 views

Road Warrior VPN Setup

I apologise up front for the rather open ended nature of this question but I've got well out of my depth and could really do with some pointers. I need to set up a road warrior VPN solution which ...
5
votes
2answers
137 views

Connecting to basic office network from the outside

Back Story: I work in the IT Department for a company that got its start by being given space to work out of from a warehouse when my company first got its start about a decade ago. Ever since then, ...
1
vote
0answers
512 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
1
vote
1answer
2k views

Can the ASA 5505 use pptp as the VPN type? If so does anyone have a link to a config example?

I'm migrating from a PIX to a ASA and the PIX has the remote users PPTP to it. This is not pass though but the VPN type of the PIX. Does the ASA even support this? I have been trying to search around ...
0
votes
1answer
742 views

No luck with cisco site to site vpn

I have two ASA 5505 running 8.4. Both can access the Internet. ASA#1 has a VoIP gateway behind it that is being NATted, hence the extra rules. This is on ASA #1: interface Vlan1 nameif inside ...
4
votes
1answer
2k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
1
vote
0answers
477 views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
1
vote
3answers
1k views

Unable to access VPN from inside network (Cisco ASA)

I'm using an ASA 5510 for a large network containing multiple subnets, some of which (wireless) have limited network access. I'd like to allow the wireless users to be able to VPN in for full network ...
0
votes
2answers
606 views

AnyConnect SSL VPN split tunneling for a single website?

We have a Cisco ASA 5510. We use split tunneling for AnyConnect SSL VPN clients. All internal addresses are tunnelled. Everything else is routed through the client's own internet connection. We use a ...
0
votes
0answers
1k views

IPsec VPN tunnel between Windows 2008 R2 and CISCO ASA?

I need to create a VPN IPsec tunnel between my Windows 2008 R2 server and a CISCO ASA device. I want my server to be both the end of the tunnel, and the server that connects to the other side (no ...
2
votes
1answer
537 views

Configure VPN on ASA to log accounting via NPS

Currently we have VPN setup on an ASA 5510. I have it set to use NPS for RADIUS authentication, but I've never really configured much as far as accounting. I'm wanting to set this up to be able to ...