Re: Cisco AnyConnect Remote Access to L2L tunnels

["Todd Simons" <tsimons () delphi-tech com>]

Inline...

A couple questions:
1) Is the ASA a peer for the L2L tunnels?
> > Yes

2) Are crypto maps for the L2L tunnels on the same interface as the AnyConnect VPN?
> > Yes

3) Do you have the hairpin enabled?
> > I think so (lines 48/49 in attached txt)

4) Can you send a copy of the ASA configuration?
> > Attached.   Note that this is not a production ASA, config is still a work in progress.  This should be considered 
> > "MainSite" and SiteA, SiteB, SiteC are satellites, RA VPNs terminate here at MainSite and should give access to 
> > SiteA, Site and (eventually) SiteC.   SiteA has 2 IPSEC Networks, the remote gateway & a /29, SiteB just has the 
> > remote gateway, Site C will just be a /27.   The tunnels that use the remote gateway are actually used for ingress 
> > traffic from Sites.  

Thanks



On Wed, Jun 10, 2009 at 1:17 PM, Todd Simons<tsimons () delphi-tech com> wrote:
> Hello All
>
> We are using the Cisco AnyConnect Client for our remote user's access, with
> a global tunnel.   Internally we have a few corporate locations that are
> linked by L2L tunnels (lets call it Site A, Site B and Site C).   The Remote
> Access clients who connect to Site A can't seem to use the L2L to Site B and
> Site C.
>
> Has anyone seen a document explaining how to do this?
>
> Todd Simons
>
> Lead IT Engineer
>
> TSimons () Delphi-Tech com
>
>
>
> Delphi Technology, Inc.
>
> 303 George Street, 5th Floor
>
> New Brunswick, NJ  08901
>
> www.delphi-tech.com
>
>
>
> Experience, Innovation... Results.
>
> ## Scanned by Delphi Technology, Inc. ##
>
> CONFIDENTIALITY NOTICE
> This e-mail message from Delphi Technology, Inc. is intended only for the
> individual or entity to which it is addressed. This e-mail may contain
> information that is privileged, confidential and exempt from disclosure
> under applicable law. If you are not the intended recipient, you are hereby
> notified that any dissemination, distribution or copying of this
> communication is strictly prohibited. If you received this e-mail by
> accident, please notify the sender immediately and destroy this e-mail and
> all copies of it.
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () listserv icsalabs com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

## Scanned by Delphi Technology, Inc. ##

Attachment: asaRA-L2L.txt
Description: asaRA-L2L.txt

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards