myITmicroblog

In my previous post I configured the remote access IPsec VPN on ASA and today I’d like to change some settings. I added one more router which will play a role of a www server. In my last scenario all traffic was sent over the tunnel:   and today I need to separate the traffic in two categories: first one - protected and it should be sent over the tunnel; second one - can be sent over the Internet. On my updated network diagram you can see R16 /192.168.202.222/. Assume it is a www server, and we should be able to access it not via the VPN tunnel. The traffic to servers behind the ASA have to be protected. First I add a new access list:   asa1 ( config )# access - list SPLIT - TUN standard permit host 192.168 . 202.222 next, I need to change group policy settings:   group - policy VPN - GP attributes split - tunnel - policy excludespecified split - tunnel - network - list value SPLIT - TUN I try now to establish the VPN connection. On the ...

Today I implement IPsec remote access VPN on ASA. Please review below diagram: In first step I implement solution where all traffic will be sent over the tunnel. Later on I try to add more requirements. As for each VPN configuration I need to implement following elements: a) Isakmp   crypto isakmp policy 10 auth pre enr 3des hash md5 gr 2 crypto isakmp enable outside b) Ipsec   crypto ipsec ikev1 transform TS esp - 3des esp - sha c) IP pool   ip local pool VPN - POOL 8.8 . 8.1 - 8.8 . 8.8 d) Group policy   group - policy VPN - GP internal group - policy VPN - GP attributes vpn - tunnel - prot IPSec address - pools value VPN - POOL e) Tunnel group   tunnel - group VPN - ASA type remote - access tunnel - group VPN - ASA ipsec - attributes pre - share cisco123 tunnel - group VPN - ASA general - attributes default - group - policy VPN - GP f) Crypto map   crypto dynamic - map DMAPA 10 set ikev1 transform TS cr...