Cisco ASA 5510 VPN connects but cannot access inside resources

By -
I have spent an entire night trying to figure this out.

I was deploying a newer ASA 5510 v7.2(2) - on my network to replace my old ASA 5510 v7.0(6). So I thought it was gonna be straight forward. Copied all the settings and plugged the thing it.

Everything looks set at first, although I noticed that the new ASDM shows the Access Rules a little differently now. When adding/changing rules, you don't get to choose the Interface anymore on both the source and destination. Checked the access-lists on CLI and they are the same commands, so I thought it didn't matter.

I got thing live, did a few tests, then packed my bag and went home.
When I tried connecting back to the office to check on some server, that's when I realized VPN is not working.

Using Cisco VPN client 5.0.07.0290, I can connect to the network but I cannot access any of the hosts behind the firewall. I went through the config of both firewalls line by line and they seems to match. But why is my VPN dropping my packets?

This guide from Cisco helped fix the problem - ASA/PIX: Allow Split Tunneling for VPN Clients on the ASA Configuration Example

I did remember that Split Tunneling never worked on my old ASA. However, it was working fine on my new config, but I have no access on the LAN. So following the above allowed me to access my inside with Split Tunnel working as intended.

Comments

Post a Comment

Popular posts from this blog

Windows RRAS VPN configuration when server is behind NAT

By -
The following configuration changes have to be done when the Windows VPN server (Remote Access and Routing Service) is behind NAT (ie, server has a private IP). To make PPTP work: Allow tcp/1723 traffic to flow through the firewall to the RRAS server Add inspect pptp on the firewall To make L2TP/IPSec work on Windows clients: On the client device, open Registry Editor Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent Add a DWORD (32-bit) key named AssumeUDPEncapsulationContextOnSendRule   Set the value to 2, and base to Hexadecimal Restart the client PC (this is important). Done!
Read more

Lenovo X1 Carbon Battery Problem - Plugged, Not Charging

By -
Solution taken from  https://stebalien.com/blog/fix-for-lenovo-x1-carbon-not-charging/ Happened on one of our laptops. The battery was draining and if you plug in the charger, it just says "Plugged In, Not Charging" To fix: Unplug the charger Restart the laptop Press Enter to interrupt normal startup Press F1 to enter the BIOS Seup Go to Config, Power Go to the bottom of the list where it says "Disable built-in battery". Press Enter. The laptop will shut down.  Plug in the charger and restart the laptop.
Read more

Multiple Remote Desktop sessions on Windows XP

By -
Continuing on from my last post about setting up RemoteApp on Windows XP. I needed to make the old application available to multiple users, so I have decided to modify the Terminal Service in my WinXP box to allow multiple remote session. I found the instructions here . It's pretty simple. You just need to replace termsrv.dll file and apply some registry changes. But you do have to consider that Windows XP employs a Windows File Protection system that detects when system files are changed and replaces it back with the original microsoft version of it. Here's what I did: Grab the file termsrv_sp3_patch.rar from the link above. Back the file C:\windows\system32\termsrv.dll into another location.  Open service.msc and change the Start-up property of the Terminal Service to Disabled Restart the computer. After restart, delete the file termsrv.dll from the following locations C:\windows\sytem32\ C:\windows\system32\dllcache C:\windows\ServicePacks\x86 Copy the termsrv.dll file from...
Read more