After Anyconnect I can't access to asa and LAN

Dear all,

My office use ASA 5505 and I use anyconnect from outside (sometimes overseas), I can connect to my network and business by ASA, internet access, but I can't access ASA and LAN (network of my client). WHY?

Office 192.168.10.0/24

192.168.11.0/24 VPN

How can I solve this problem?

ASA Version 9.2 (3)
!
ciscoasa hostname
activate the encrypted password of XXXXXXXXXX
volatile xlate deny tcp any4 any4
volatile xlate deny tcp any4 any6
volatile xlate deny tcp any6 any4
volatile xlate deny tcp any6 any6
volatile xlate deny udp any4 any4 eq field
volatile xlate deny udp any4 any6 eq field
volatile xlate deny udp any6 any4 eq field
volatile xlate deny udp any6 any6 eq field
passwd encrypted XXXXXXXXXX
names of
192.168.11.1 mask - 192.168.11.10 local pool Pool VPN IP 255.255.255.0
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
interface Vlan1
nameif inside
security-level 100
IP address 192.168.10.254 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
address IP AAA. BBB. CCC DDD EEE. FFF. GGG. HHH
!
boot system Disk0: / asa923 - k8.bin
passive FTP mode
clock timezone 8 HKST
DNS domain-lookup outside
DNS server-group DefaultDNS
Name-Server 8.8.8.8
Server name 8.8.4.4
permit same-security-traffic intra-interface
network of the VPN_Pool object
subnet 192.168.11.0 255.255.255.240
network of the NETWORK_OBJ_192.168.10.0_24 object
192.168.10.0 subnet 255.255.255.0
inside_access_in of access allowed any ip an extended list
outside_access_in list extended access permit icmp any one
DefaultRAGroup_splitTunnelAcl_1 list standard access allowed 192.168.10.0 255.255.255.0
pager lines 24
Enable logging
asdm of logging of information
Within 1500 MTU
Outside 1500 MTU
ICMP unreachable rate-limit 1 burst-size 1
ASDM image disk0: / asdm-731 - 101.bin
don't allow no asdm history
ARP timeout 14400
no permit-nonconnected arp
interface NAT (outside, outside) dynamic source VPN_Pool
NAT (inside, outside) static source any any static destination VPN_Pool VPN_Pool non-proxy-arp-search to itinerary
!
!
NAT source auto after (indoor, outdoor) dynamic one interface
inside_access_in access to the interface inside group
Access-group outside_access_in in interface outside
Route outside 0.0.0.0 0.0.0.0 AAA. BBB. CCC DDD. 1
Timeout xlate 03:00
Pat-xlate timeout 0:00:30
Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
Floating conn timeout 0:00:00
dynamic-access-policy-registration DfltAccessPolicy
identity of the user by default-domain LOCAL
Activate Server http XXXXX
http 192.168.10.0 255.255.255.0 inside
No snmp server location
No snmp Server contact
Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac
Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-128-SHA-TRANS-aes - esp esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-DES-SHA-TRANS esp - esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transit
Crypto ipsec ikev2 ipsec-proposal OF
encryption protocol esp
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 proposal ipsec 3DES
Esp 3des encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES
Esp aes encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES192
Protocol esp encryption aes-192
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 AES256 ipsec-proposal
Protocol esp encryption aes-256
Esp integrity sha - 1, md5 Protocol
Crypto ipsec pmtu aging infinite - the security association
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set
Dynamic crypto map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-192-SHA ESP-AES-256-SHA SHA-ESP-3DES ESP-DES-SHA ESP-AES-128-SHA-TRANS ESP-AES-192-SHA-TRANS ESP-AES-256-SHA-ESP ESP-3DES-SHA-TRANS TRANS-DES-SHA-TRANS
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
outside_map interface card crypto outside
Crypto ca trustpoint ASDM_TrustPoint0
Terminal registration
name of the object CN = ciscoasa
Configure CRL
Crypto ca trustpoint Anyconnect_Self_Signed_Cert
registration auto
name of the object CN = ciscoasa
Configure CRL
Crypto ca trustpoint ASDM_Launcher_Access_TrustPoint_0
registration auto
name of the object CN = 115.160.145.114, CN = ciscoasa
Configure CRL
trustpool crypto ca policy
string encryption ca Anyconnect_Self_Signed_Cert certificates
certificate 5c7d4156
308202d 4 308201bc a0030201 0202045c 415630 0d06092a 864886f7 0d 010105 7 d
0500302c 3111300f 06035504 03130863 6973636f 61736131 17301506 092a 8648
09021608 63697363 6f617361 31353131 31303131 31363231 301e170d 86f70d01
5a170d32 35313130 37313131 3632315a 302 c 3111 55040313 08636973 300f0603
636f6173 61311730 1506092a 864886f7 0d 010902 16086369 73636f61 73613082
0122300d 06092 has 86 01010105 00038201 0f003082 010a 0282 010100cc 4886f70d
af43a895 8c2c3f49 ad16c4b9 a855b47b 773f4245 1954c 728 7 c 568245 6ddc02ab
78 c 45473 eb4073f6 401d1dca 050dc53f cfb93f58 68087f6d 03334fc 1 53f41daa
454ff4bb 691235ab 34e21d98 4cfecef4 204e9c95 76b1b417 b5cf746c 830788b 4
60063e89 0ffe5381 42694cf8 d1be20d4 4c95d9c6 93041af2 94783de0 fe93cf67
4ad8954f 5392790b 4ded225c c3128cba 8d3ee07b f9fd2208 34b1956c be0a774a
d054a290 14316cc0 1670bdea f04c828b 7f9483fb 409fa707 fbe5a257 33597fed
ca790881 b1d4d3dc b0e1095e bf04014e 19c5cfeb f74aac57 ee39cd6e 7389cdd1
8b9421fa ee2b99ae df07fba1 0b506cd8 ea9f64c5 dd9169ad 157fcdb7 f6cfff02
03010001 300 d 0609 2a 864886 05050003 82010100 c8719770 1305bd9c f70d0101
2608f039 0dc6b058 0dfe3d88 76793 has 18 8f601dda b 8553, 893 d95e3b25 30ef7354
772f7d0b 772869d 7 372f8f5c f32992af fa2c8b6e 0f0ae4ce 4e068b8d b7916af2
affa1953 5bfd01a6 1a3c147d 75d95d8c 1122fa85 3905f27b 2474aff4 11fff24f
c305b648 b4c9d8d4 9dcf444b 9326cda3 0c4635d0 90ff8dd8 9444726c 82e002ec
be120937 0414c20a 39df72fb 76cd9c38 cde9afda 019e9230 66e5dba8 ed208eae
5faabb85 ff04f8f2 c36b724b 62ec52cc f967ee1d 1a6458fc 507a 2377 45 c 20635
2c14c431 baac678a dcc20329 4db7aa51 02c 36904 75b5f307 f1cc056d 726bc436
597a 3814 4ccd421d cb77d8f5 46a8ae69 2d617ac8 2160d7af
quit smoking
string encryption ca ASDM_Launcher_Access_TrustPoint_0 certificates
certificate 5d7d4156
308201f0 30820308 a0030201 0202045d 415630 0d06092a 864886f7 0d 010105 7 d
05003046 06035504 03130863 61736131 18301606 03550403 6973636f 3111300f
130f3131 352e3136 302e3134 352e3131 1506092a 34311730 864886f7 0d 010902
73636f61 16086369 7361301e 170d 0d 323531 3135 31313130 31323136 35395a 17
3111300f 06035504 03130863 6973636f 61736131 a 31303731 32313635 395, 3046
18301606 03550403 130f3131 352e3136 302e3134 352e3131 1506092's 34311730
864886f7 0d 010902 16086369 73636f61 73613082 0122300d 06092 has 86 4886f70d
01010105 00038201 0f003082 010 has 0282 010100cc af43a895 8c2c3f49 ad16c4b9
a855b47b 773f4245 1954c 728 7 c 78 45473 eb4073f6 401d1dca 568245 6ddc02ab
050dc53f cfb93f58 68087f6d 03334fc 1 53f41daa 454ff4bb 691235ab 34e21d98
b 830788 4 4cfecef4 204e9c95 76b1b417 b5cf746c 60063e89 0ffe5381 42694cf8
d1be20d4 4c95d9c6 93041af2 94783de0 fe93cf67 4ad8954f 5392790b 4ded225c
c3128cba 8d3ee07b f9fd2208 34b1956c be0a774a d054a290 14316cc0 1670bdea
f04c828b 7f9483fb 409fa707 fbe5a257 33597fed ca790881 b1d4d3dc b0e1095e
bf04014e 19c5cfeb f74aac57 ee39cd6e 7389cdd1 8b9421fa ee2b99ae df07fba1
0b506cd8 ea9f64c5 dd9169ad 157fcdb7 f6cfff02 03010001 300 d 0609 2a 864886
05050003 82010100 00089cd 3 d0f65c5e 91f7ee15 bbd98446 35639ef9 f70d0101
45b 64956 f146234c 472b52e6 f2647ced a109cb6b 52bf5f5d 92471cb7 a3a30b63
052ac212 c6027535 16e42908 ea37c39a 4d203be9 8c4ed8cd 40935057 3fe8a537
a837c75c feff4dcc 1b2fd276 257f0b46 8fcd2a5c cbdcacec cd14ee46 be136ae7
7cd4ae0d aace54fe 5187ea57 40d2af87 cded3085 27d6f5d8 1c15ef98 f95cc90e
a 485049 4 805efa8f 63406609 a663db53 06b94e53 07c1c808 61eadcdb 2c952bee
74a0b3dd ae262d84 40b85ec5 a89179b2 7e41648e 93f0e419 3c482b29 e482d344
d756d450 8f0d9302 d023ac43 a31469a4 105c8a0c b1418907 693c558c 08f499ef
364bc8ba 4543297a a17735a0
quit smoking
IKEv2 crypto policy 1
aes-256 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 10
aes-192 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 20
aes encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 30
3des encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 40
the Encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
Crypto ikev2 activate out of service the customer port 443
Crypto ikev2 access remote trustpoint Anyconnect_Self_Signed_Cert
Crypto ikev1 allow outside
IKEv1 crypto policy 10
authentication crack
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 20
authentication rsa - sig
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 30
preshared authentication
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 40
authentication crack
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 50
authentication rsa - sig
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 60
preshared authentication
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 70
authentication crack
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 80
authentication rsa - sig
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 90
preshared authentication
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 100
authentication crack
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 110
authentication rsa - sig
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 120
preshared authentication
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 130
authentication crack
the Encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 140
authentication rsa - sig
the Encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 150
preshared authentication
the Encryption
sha hash
Group 2
life 86400
Telnet timeout 5
SSH stricthostkeycheck
SSH timeout 5
SSH group dh-Group1-sha1 key exchange
Console timeout 0
No ipv6-vpn-addr-assign aaa
no local ipv6-vpn-addr-assign

dhcpd 192.168.10.254 dns 8.8.8.8
dhcpd rental 43200
!
dhcpd address 192.168.10.1 - 192.168.10.100 inside
dhcpd allow inside
!
a basic threat threat detection
Statistics-list of access threat detection
no statistical threat detection tcp-interception
NTP AAA server. BBB. CCC. Source DDD outside prefer
SSL-point of approval ASDM_Launcher_Access_TrustPoint_0 outside vpnlb-ip
SSL-trust outside ASDM_Launcher_Access_TrustPoint_0 point
WebVPN
allow outside
AnyConnect image disk0:/anyconnect-win-4.2.00096-k9.pkg 1
AnyConnect profiles Anyconnect_client_profile disk0: / Anyconnect_client_profile.xml
AnyConnect enable
tunnel-group-list activate
internal DefaultRAGroup_2 group strategy
attributes of Group Policy DefaultRAGroup_2
DNS-server AAA value. BBB. CCC AAA DDD. BBB. CCC DDD.
Ikev2 VPN-tunnel-Protocol
Split-tunnel-policy tunnelspecified
internal GroupPolicy_Anyconnect group strategy
attributes of Group Policy GroupPolicy_Anyconnect
WINS server no
value of server DNS 8.8.8.8 8.8.4.4
Ikev1 VPN-tunnel-Protocol, l2tp ipsec ikev2 ssl-client
Split-tunnel-policy tunnelall
IPv6-split-tunnel-policy excludespecified
value of Split-tunnel-network-list DefaultRAGroup_splitTunnelAcl_1
by default no
activate dns split-tunnel-all
IPv6 address pools no
WebVPN
AnyConnect value Anyconnect_client_profile type user profiles
username password XXXXXXX XXXXXXXXXXXXXXX encrypted privilege 15
username password XXXXXXX XXXXXXXXXXXXXXX encrypted privilege 15
attributes of username XXXXXXX
Ikev1 VPN-tunnel-Protocol, l2tp ipsec ikev2 ssl-client
attributes global-tunnel-group DefaultRAGroup
address pool VPN-pool
Group Policy - by default-DefaultRAGroup_2
IPSec-attributes tunnel-group DefaultRAGroup
IKEv1 pre-shared key XXXXXXXXX
tunnel-group DefaultRAGroup ppp-attributes
ms-chap-v2 authentication
tunnel-group Anyconnect type remote access
tunnel-group Anyconnect General attributes
address pool VPN-pool
Group Policy - by default-GroupPolicy_Anyconnect
NAT - to-public-ip assigned inside
tunnel-group Anyconnect webvpn-attributes
enable Anyconnect group-alias
tunnel-group Anyconnect ppp-attributes
ms-chap-v2 authentication
!
Global class-card class
match default-inspection-traffic
!
!
World-Policy policy-map
Global category
inspect the dns
inspect the ftp
inspect h323 h225
inspect the h323 ras
inspect the rsh
inspect the rtsp
inspect esmtp
inspect sqlnet
inspect the skinny
inspect sunrpc
inspect xdmcp
inspect the netbios
inspect the tftp
Review the ip options
!
service-policy-international policy global
context of prompt hostname
no remote anonymous reporting call
call-home
Profile of CiscoTAC-1
no active account
http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
email address of destination [email protected] / * /
destination-mode http transport
Subscribe to alert-group diagnosis
Subscribe to alert-group environment
Subscribe to alert-group monthly periodic inventory
monthly periodicals to subscribe to alert-group configuration
daily periodic subscribe to alert-group telemetry
Cryptochecksum:24991680b66624113beb31d230c593bb
: end

Hi cwhlaw2009,

You must configure a policy Split-tunnel, if you want to be able to access the internal and local network at the same time.

http://www.Cisco.com/c/en/us/support/docs/security/ASA-5500-x-series-next-generation-firewalls/100936-asa8x-split-tunnel-AnyConnect-config.html

It may be useful

-Randy-

Tags: Cisco Security

Similar Questions

  • My laptop connects is more to the internet, either hard wired or wireless. When it is hard wired, the laptop displays connection but I can't access the internet, and I've done it before.

    My laptop connects is more to the internet, either hard wired or wireless.  When it is hard wired, the laptop displays connection but I can't access the internet, and I've done it before.  My other computer has service very well (or I wouldn't send this message) I checked everything, what to do?

    original title: internet connection.

    Hi vonhatten,

    1. Did you the latest changes on the computer?
    2. You receive an error message when you try to connect to the internet?
    3. You have security software installed on the computer?

    Refer to the article below and try the steps mentioned, check if it helps.

    In Windows network connection issues

    http://support.Microsoft.com/kb/313242

  • My old MSN e-mail account was hacked and blocked. I created a new Windows Live Hotmail account. How can I access the emails and blocked my old account contact information?

    My old MSN e-mail account was hacked and blocked. I created a new hotmail account. How can I access the emails and blocked my old account contact information?  Thanks for any help!

    original title: hacked E-mail

    Hi BigByrd,

    I'm afraid it's almost impossible to access the old MSN your Hotmail account is newly created account.
    See you soon ~
  • I can't access drive "D" and remove some content to make more room.

    * Original title: upgrade.

    Hello. I'm trying to reinstall my own copy of windows 7 Ultimate on my laptop for a clean start.

    My problem is that, because I only did this for a while the "D" partition is completely filled. The bar that shows the ability is red instead of green and because there is no place, I can't reinstall the O/P.

    For some reason, I can't access drive "D" and remove some content to make more room. It does not appear on Device Manager, and when I try to access it through my computer it shows "D" drive must be empty.

    I also tried to add and remove programs, but they all seem to be on the C"" drive.

    How do I enter "D" drive to remove enough information for me to finish a reinstall?

    Start the custom installation, it will ask you where store system.  Click Advanced.  Delete all partitions.  The installation process will create the partitions, that he needs and format.  I recommend strongly against any other that what Windows 7 install really wants partitioning.

  • Dear Adobe, I've updated my account, my payment charged 2 times 1 EUR and still I can't access the PS and LR! Pls help me to find a contact in the customer service! Much thanks! Rita Frei

    Dear Adobe, I've updated my account, my payment charged 2 times 1 EUR and still I can't access the PS and LR! Pls help me to find a contact in the customer service! Much thanks! Rita Frei

    Go to Adobe Creative Cloud


    Hi Rita,.

    For 1 EUR costs please see Adobe Store | Order FAQ and your online payment

    You will need to contact support by calling/chat for this request.

    Contact the customer service

    * Be sure to stay connected with your Adobe ID before accessing the link above *.

    Kind regards

    Sheena

  • AnyConnect client can not access local network

    Hello

    I have a problem with the Cisco anyconnect. Once clients are connected they cannot access anything whatsoever, including their default gateway.

    Pool of the VPN client is on the same subnet as the LAN (139.16.1.x/24). Local network clients can access DMZ, VPN clients can ping computers on the local network, but they cannot access the DMZ.

    I guess that any rule providing that traffic is absent but I m new with Cisco ASA and I m totally lost. I read as much as I could on this topic, but I do not understand which rule is necessary.

    Thank you very much in advance for your support.

    ASA release 9.4 (1)
    !
    ciscoasa hostname
    activate the encrypted password of WmlxhdtfAnw9XbcA
    TA.qizy4R//ChqQH encrypted passwd
    names of
    mask 139.16.1.50 - 139.16.1.80 255.255.255.0 IP local pool Pool_139
    !
    interface GigabitEthernet1/1
    nameif outside
    security-level 0
    192.168.1.100 IP address 255.255.255.0
    !
    interface GigabitEthernet1/2
    nameif inside
    security-level 100
    IP 139.16.1.1 255.255.255.0
    !
    interface GigabitEthernet1/3
    nameif DMZ
    security-level 50
    IP 172.16.1.1 255.255.255.0
    !
    interface GigabitEthernet1/4
    Shutdown
    No nameif
    no level of security
    no ip address
    !
    interface GigabitEthernet1/5
    Shutdown
    No nameif
    no level of security
    no ip address
    !
    interface GigabitEthernet1/6
    Shutdown
    No nameif
    no level of security
    no ip address
    !
    interface GigabitEthernet1/7
    Shutdown
    No nameif
    no level of security
    no ip address
    !
    interface GigabitEthernet1/8
    Shutdown
    No nameif
    no level of security
    no ip address
    !
    Management1/1 interface
    management only
    nameif management
    security-level 100
    11.11.11.11 IP address 255.255.255.0
    !
    passive FTP mode
    network obj_any object
    subnet 0.0.0.0 0.0.0.0
    internal subnet object-
    139.16.1.0 subnet 255.255.255.0
    network dmz subnet object
    subnet 172.16.1.0 255.255.255.0
    wialon Server external ip network object
    Home 192.168.1.132
    wialon-Server network objects
    Home 172.16.1.69
    Wialon-service-TCP object service
    destination tcp source between 1 65535 21999 20100 service range
    Wialon-service-UDP object service
    destination service udp source between 0 65535 21999 20100 range
    network of the NETWORK_OBJ_139.16.1.0_25 object
    subnet 139.16.1.0 255.255.255.128
    outside_acl list extended access permit tcp any object wialon-Server eq www
    outside_acl list extended access allowed object Wialon-service-TCP any wialon-server object
    outside_acl list extended access allowed object Wialon-service-UDP any wialon-server object
    pager lines 24
    asdm of logging of information
    Outside 1500 MTU
    Within 1500 MTU
    MTU 1500 DMZ
    management of MTU 1500
    ICMP unreachable rate-limit 1 burst-size 1
    don't allow no asdm history
    ARP timeout 14400
    no permit-nonconnected arp
    NAT (inside, outside) static source any any static destination NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 non-proxy-arp-search to itinerary
    !
    network obj_any object
    dynamic NAT (all, outside) interface
    internal subnet object-
    NAT dynamic interface (indoor, outdoor)
    wialon-Server network objects
    NAT (DMZ, external) service wialon Server external ip static tcp www www
    Access-group outside_acl in interface outside
    Route outside 0.0.0.0 0.0.0.0 192.168.1.1 1
    Timeout xlate 03:00
    Pat-xlate timeout 0:00:30
    Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
    Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
    Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    Floating conn timeout 0:00:00
    identity of the user by default-domain LOCAL
    Enable http server
    http 11.11.11.0 255.255.255.0 management
    http 139.16.1.0 255.255.255.0 inside
    No snmp server location
    No snmp Server contact
    service sw-reset button
    Crypto ipsec ikev2 AES256 ipsec-proposal
    Protocol esp encryption aes-256
    Esp integrity sha - 1, md5 Protocol
    Crypto ipsec ikev2 ipsec-proposal AES192
    Protocol esp encryption aes-192
    Esp integrity sha - 1, md5 Protocol
    Crypto ipsec ikev2 ipsec-proposal AES
    Esp aes encryption protocol
    Esp integrity sha - 1, md5 Protocol
    Crypto ipsec ikev2 proposal ipsec 3DES
    Esp 3des encryption protocol
    Esp integrity sha - 1, md5 Protocol
    Crypto ipsec ikev2 ipsec-proposal OF
    encryption protocol esp
    Esp integrity sha - 1, md5 Protocol
    Crypto ipsec pmtu aging infinite - the security association
    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
    outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
    outside_map interface card crypto outside
    Crypto ca trustpoint ASDM_TrustPoint0
    registration auto
    domain name full ciscoasa.srdongato.null
    E-mail [email protected] / * /
    name of the object CN = srdongato
    Serial number
    Proxy-loc-transmitter
    Configure CRL
    Crypto ca trustpoint ASDM_Launcher_Access_TrustPoint_0
    registration auto
    full domain name no
    name of the object CN = 139.16.1.1, CN = ciscoasa
    ASDM_LAUNCHER key pair
    Configure CRL
    trustpool crypto ca policy
    string encryption ca ASDM_TrustPoint0 certificates
    certificate 09836256
    30820381 30820269 a0030201 02020409 83625630 0d06092a 864886f7 0d 010105
    05003050 31123010 06035504 03130973 72646f6e 6761746f 313 has 3012 06035504
    05130b4a a 41443139 32323033 34343024 06092, 86 01090216 17636973 4886f70d
    636f6173 612e7372 646f6e67 61746f2e 6e756c6c 31353132 30353036 301e170d
    5a170d32 33333535 35313230 32303633 3335355a 30503112 30100603 55040313
    09737264 6f6e6761 30120603 55040513 31393232 30333434 0b4a4144 746f313a
    2a 864886 30240609 f70d0109 6973636f 02161763 6173612e 7372646f 6e676174
    6f2e6e75 6c6c3082 0122300d 06092 has 86 01010105 00038201 0f003082 4886f70d
    010a 0282 010100d 2 295e679c 153e8b6a d3f6131d 8ea646e3 aa0a5fa9 20e49259
    ca895563 7e818047 033a4e8f 57f619e9 fa93bfd5 6c44141f b0abf2c0 8b86334e
    bac63f41 99e6d676 c689dcf7 080f2715 038a8e1b 694a00de 7124565e a1948f09
    8dbeffab c7c8a028 741c5b10 d0ede5e9 599f38fe 5b88f678 4decdc4b b 353, 6708
    cfa2fbce f58be06e 18feba56 4b2b04a1 77773ec6 5c58d2ed d7ca4f17 980f0353
    138bfe65 1b1165e6 7b6f94bb ab4d4286 e900178c 147a6dba 2427f38e e225030f
    0a66d1eb 5075c57e 6d77e5bb 247f5bc3 8d3530f0 49dedf2d 21a24b5f daa08d98
    690183cf e82a6b8d 5e489956 c5eecdbc 7fc2365c b629a52b 126b51e2 18590ed5
    c9da8503 a639f102 03010001 a3633061 300f0603 551d 1301 01ff0405 30030101
    ff300e06 03551d0f 0101ff04 86301f06 04030201 23 04183016 80143468 03551d
    dec79103 0a91b530 1ada7e47 7e27b16d 4186301d 0603551d 0e041604 143468de
    c791030a 91b5301a da7e477e 27b16d41 86300d 86f70d01 01050500 06 092 a 8648
    003cdb04 03820101 8ef5ed31 c05c684b ad2b0062 96bfd39a ecb0a3fe 547aebe5
    14b753e7 89f55827 3d4e0aa8 b8674e45 80d4c023 8e99a7b4 0907d 347 060a2fe4
    fa6e0c2f 3b9cd708 a539c09f 7022d2ee fb6e2cf6 82b0e861 a2839a71 1512b3ec
    e28664e9 732270c 9 d1c679d9 1eaf2ad5 31c3ff97 09aae869 88677a3d b 007, 5699
    ecb3032e 2dd0f74f 81f9a8fb 79f30809 723bbdbf dfef4154 5ad6b012 a8f37093
    481fa678 b44b0290 23390036 042828f3 5eefdc43 ebe52d26 78934455 9b4234a9
    4146 166e5adc b431f12f 8d0fbf16 46306228 731c bfeebc43 34 76984 d2e6ebbc
    88ca120a 96838694 d4f32884 963e7385 987ec6b0 dfa28d49 05ba5fa8 641bcfc7
    ff92ac3c 52
    quit smoking
    string encryption ca ASDM_Launcher_Access_TrustPoint_0 certificates
    Certificate 0 is 836256
    308202cc a0030201 0202040a 0d06092a 83625630 864886f7 0d 010105 308201b 4
    05003028 06035504 03130863 61736131 13301106 03550403 6973636f 3111300f
    130a 3133 392e3136 2e312e31 31353132 30353036 35363236 5a170d32 301e170d
    35313230 32303635 3632365a 30283111 55040313 08636973 636f6173 300f0603
    61311330 11060355 0403130 3133392e 31362e31 2e313082 0122300d 06092 has 86
    4886f70d 01010105 00038201 0f003082 010 has 0282 010100e7 a5c16e86 16c15a10
    e018b868 bac7271a 30f1a3f8 ecb9c6b8 3ed4b1ad c9468f5e 287f2a7a 644f1496
    c43a061e da927d09 a755b53e ed7c6a66 f2f1fb1e f944345c 86e08ce0 891c99b3
    13101ab3 04963fad f91f987f 99f22a89 cd1e8c5a 5e4c026d 2cadd7b7 6620bbd1
    b4a5135b 24ec886f fa061a06 dd536e96 1e483730 756c 4101 23f83a8d 944a7fbe
    93c51d56 32ac0d17 ceb75f63 0ae24f07 f2c54e83 5b84ff00 16b0b899 c925c737
    1765b 066 23 b 54645 bc419684 d09dd130 c1479949 68b0a779 df39b078 6fb0deb9
    758b14c3 f0801faf f0ad60e1 a018ffba d769f867 3fe8e5fc 88ccc5b2 2319f5d4
    617a78c4 74e7a64b 5c68276c 06ea57c1 d0ffce4b 358c4d02 03010001 300 d 0609
    2a 864886 05050003 82010100 dff97c9f 4256fd47 8eb661fd d22ecea4 f70d0101
    589eff09 958e01f1 a435a20e 5ed1cf19 af42e54d d61fc0ab cb2ee7ac 7fcb4513
    1a44cc86 1e020d72 3a3f78d2 4 d 225177 857093d 9 f5fcf3c7 6e656d2b 54a0c522
    f636b8cf 33c5ae34 ea340f32 85dff4c1 50165e7a e94de10b ced15752 0b3a76c1
    2a50777b 20291106 a1a8a214 a 8 003716 680c15d4 ac3f7cc7 378f8f5f 38e3403f
    f958c095 e549c8ed 4baf8cc5 bdcd230e 260754ea 953c3a4c eb01fef5 62b97e01
    9f82ce6b f479dbdd 000c45af 8758b35f b4a958ee 32c4db3f 2ddc7385 dc05b0e3
    78b609ba a9280841 2433ae87 5dd7a7c2 d5691068 1dc0eddc c23f99c5 3df8b1a5
    aadbd82a 423f4ba8 563142bf 742771c 3
    quit smoking
    IKEv2 crypto policy 1
    aes-256 encryption
    integrity sha
    Group 2 of 5
    FRP sha
    second life 86400
    IKEv2 crypto policy 10
    aes-192 encryption
    integrity sha
    Group 2 of 5
    FRP sha
    second life 86400
    IKEv2 crypto policy 20
    aes encryption
    integrity sha
    Group 2 of 5
    FRP sha
    second life 86400
    IKEv2 crypto policy 30
    3des encryption
    integrity sha
    Group 2 of 5
    FRP sha
    second life 86400
    IKEv2 crypto policy 40
    the Encryption
    integrity sha
    Group 2 of 5
    FRP sha
    second life 86400
    Crypto ikev2 activate out of service the customer port 443
    Crypto ikev2 access remote trustpoint ASDM_TrustPoint0
    Telnet 139.16.1.0 255.255.255.0 inside
    Telnet 11.11.11.0 255.255.255.0 management
    Telnet timeout 5
    without ssh stricthostkeycheck
    SSH timeout 5
    SSH group dh-Group1-sha1 key exchange
    Console timeout 0
    dhcpd outside auto_config
    !
    dhcpd address 172.16.1.69 - DMZ 172.16.1.69
    dhcpd dns 87.216.1.65 87.216.1.66 DMZ interface
    dhcpd option 3 ip 172.16.1.1 DMZ interface
    dhcpd enable DMZ
    !
    a basic threat threat detection
    Statistics-list of access threat detection
    no statistical threat detection tcp-interception
    SSL-trust outside ASDM_TrustPoint0 point
    SSL-trust ASDM_Launcher_Access_TrustPoint_0 inside point
    Trust ASDM_Launcher_Access_TrustPoint_0 inside the vpnlb-ip SSL-point
    WebVPN
    allow outside
    AnyConnect image disk0:/anyconnect-win-3.1.12020-k9.pkg 1
    AnyConnect profiles Wialon_client_profile disk0: / Wialon_client_profile.xml
    AnyConnect enable
    tunnel-group-list activate
    Disable error recovery
    internal GroupPolicy_Wialon group strategy
    attributes of Group Policy GroupPolicy_Wialon
    WINS server no
    value of 192.168.1.1 DNS server
    client ssl-VPN-tunnel-Protocol ikev2
    by default no
    WebVPN
    AnyConnect value Wialon_client_profile type user profiles
    dynamic-access-policy-registration DfltAccessPolicy
    wialon_1 Wy2aFpAQTXQavfJD username encrypted password
    wialon_2 4STJ9bvyWxOTxIyH encrypted password username
    remote access to Wialon tunnel-group type
    attributes global-tunnel-group Wialon
    address pool Pool_139
    Group Policy - by default-GroupPolicy_Wialon
    tunnel-group Wialon webvpn-attributes
    enable Wialon group-alias
    !
    class-map inspection_default
    match default-inspection-traffic
    !
    !
    type of policy-card inspect dns preset_dns_map
    parameters
    maximum message length automatic of customer
    message-length maximum 512
    Policy-map global_policy
    class inspection_default
    inspect the preset_dns_map dns
    inspect the ftp
    inspect h323 h225
    inspect the h323 ras
    inspect the rsh
    inspect the rtsp
    inspect esmtp
    inspect sqlnet
    inspect the skinny
    inspect sunrpc
    inspect xdmcp
    inspect the sip
    inspect the netbios
    inspect the tftp
    Review the ip options
    !
    global service-policy global_policy
    context of prompt hostname
    no remote anonymous reporting call
    Cryptochecksum:447ec315ae30818a98f705fb1bf3fd75

    Hello

    You don't have NAT exemption the DMZ network to the pool of VPN traffic.

    Please try to add the following statement to run:

    nat (DMZ,outside) 1  source static any any destination static NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 route-lookup
    Also please delete the existing instruction manual nat "non-proxy-arp" statement, because it can cause problems like you the ip subnet address pool is identical to that of the Interior of the network.
    no nat (inside,outside) source static any any destination static NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 no-proxy-arp route-lookup
    
    nat (inside,outside) 1 source static any any destination static NETWORK_OBJ_139.16.1.0_25 NETWORK_OBJ_139.16.1.0_25 route-lookup
    
    
    Cordially Véronique
  • my laptop has completed the automatic update of vista and after that I can't access wireless router with an ethernet cable only

    My sony vaio laptop running windows vista has completed an automatic update and after that, I can't connect to my wireless network, I can access the internet with an ethernet cable.

    It worked perfectly fine before the update, I know that there is a problem with what I had the same problem in the past. The way it's been solved previously was to restore the laptop to an earlier point before the end of the update. Unfortunately I can't do that and the laptop has been completed, wiped and there is no backup where I can go to restore.

    I know I can remove some updates but don't know what 1, me it is another way to solve the problem.

    Your help would be much appreciated.

    Thank you

    Hi Nadzarif,

    You can try the following steps and check if it helps:

    Method 1:

    Because the wireless stopped working after windows update, you can check the Sony support link and try to install the latest version of the drivers for the wireless card and check if it helps:

    Sony support

    For more information, see the article:

    Update drivers: recommended links

    Method 2:

    Updated version has a problem in the history of the update.

    Step 1:

    You can check in the history of the update for the updates that are installed recently or before the show.

    a. open Windows Update by clicking the Start button. In the search box, type Update, and then in the list of results, click Windows Update.

    (b) in the left pane, click view update history.

    c. to display more information about an update, double-click it.

    See the Windows updates are installed

    Step 2:

    Uninstall recently installed updates and install the updates one at a time to understand what update is the cause of the problem.

    For more information, see the articles:

    Remove an update

    Install Windows updates

  • BlackBerry smartphones can not access to MMS and Internet after upgrading the operating system

    Hi all. I am a new user of BB. I got my Curve 9300 three weeks back. As soon as it has been recorded, I was invited 2 upgrade operating system - which I made and subscribed 2 BB Protect. A friend sent me a MMS, but I can't consider my settings r bad. I cannot access the internet most of the time, but can still access site BBerry. Help, please. My carrier is MTN

    OK... so you should do the last thing that I have loaded... contact your operator for formal support. It's them you pay for your service... and they deliver it.

    Good luck!

  • Access VPN ASA and cisco ISE Admin

    Hello

    Currently I'm deployment anyconnect VPN Solution for my client on ASA 9.2 (3). We use the ISE 1.3 to authenticate remote users.

    In the policy stipulates the conditions, I put the condition as below.

    Policy name: Anyconnect

    Condition: DEVICE: Device Type Device Type #All Device Types #Dial - in access EQUALS AND
    RADIUS: NAS-Port-Type is equal to virtual

    I'm authenticating users against the AD.

    I am also restrict users based on group membership in authorization policies by using the OU attributes.

    This works as expected for remote users.

    We also use the ISE to authenticate administrators to connect to the firewall. Now what happens is, Cisco ASA valid also against policy, administrators and their default name Anyconnect.

    Now the question is, how to set up different political requirement for access network admin and users the same Firewall VPN.

    Any suggestions on this would be a great help.

    See you soon,.

    Sri

    You can get some ideas from this article of mine:

    http://ltlnetworker.WordPress.com/2014/08/31/using-Cisco-ISE-as-a-generic-RADIUS-server/

  • I can't access my nas on lan connection drive

    I can't access my NAS drive on a local network connection (essentially acting as an external hard drive until the BB House is sorted) worked a week ago, but had a B@#ch of a virus. The virus now disappeared but think that a lot of my reg has been corrupted/gone. Is there a way I can resolve this issue without having to re - install windows? I am running windows 7 sp1. My discovery of net will not, unless I have turn off the windows firewall. The NAS drive is a disk 500 GB looqs meebox configuration. Any help would be appreciated. Thank you

    Hi KrisPerks,

    I'm sorry to hear that you encounter the problem with connecting to NAS after removing a bunch of virus. Do not worry, I'm here to help you with this question.

    Let us try the following methods and check if it works for you.

    Method 1:

    Run the network troubleshooter utility.

    Using the troubleshooter from network in Windows 7:

    http://Windows.Microsoft.com/en-us/Windows7/using-the-network-troubleshooter-in-Windows-7

    Method 2:

    Tool (SFC) System File Checker scan. Scan tool running System File Checker will help you fix corrupt or missing system files on your computer.

    How to use the tool File Checker system to troubleshoot missing or corrupted on Windows 7 system files: http://support.microsoft.com/kb/929833

    Also use Microsoft Safety Scanner and check if there is no threat of viruses.

    Microsoft safety scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. During these 10 days, it will remove all the files infected by the virus and records. I suggest you create a backup of your data, and then install Microsoft Safety Scanner.

    Please reply with the status of the issue, so that we can better help you.

  • Without a password how can I access the computer and make my own?

    I inherited a Mac Mini (2012, but do not have the password to the owner (departed).) How can I access and make my own?

    Follow the steps here:

    What to do before you sell or give away your Mac - Apple Support

    To restore to a factory State, set up like yours.

  • A domain user can only access Xch2007 servers and blocked access to all other servers in the domain.

    We must put in place a 2008r2 domain user account and allow it access xch2007 email and a file only decidated server.   Access to the other app domain, print and file servers will be blocked.    What will be the best way to do this?   Can we use Group Policy?

    Your Windows Server 2008 R question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please ask your question on the Windows Server. You can follow the link to your question:

    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  • Can't access the "devices and printers" in Windows 7

    I'm unable to access the "devices and printers" menu in windows 7 (32)

    When I click on the menu, it crashes just a white screen and never load.  I checked the print spooler service and it is running...

    If you have installed McAfee software that can block the enumeration of objects in devices and printers.  Make sure that the Bluetooth service works also if you have any compatible bluetooth devices. Alan Morris Windows printing team; Here Microsoft Knowledge Base search: http://support.microsoft.com/search/Default.aspx?adv=1

  • I have a student permit a year creative cloud, but after update, I can't access the subscriptions for all apps

    I get error 130:11 when you try to open acrobat, and I can't open my apps because it says that I don't have a subscription.  On July 1, 2015, I bought my student permit that has been for a year.  I really need access to the CC for the work.

    Your subscription to cloud shows correctly on your account page?

    If you have more than one email, you will be sure that you use the right Adobe ID?

    https://www.adobe.com/account.html for subscriptions on your page from Adobe

    .

    If Yes

    Some general information for a subscription of cloud

    Cloud programs don't use serial... numbers you, connect you to your cloud account paying to download & install & activate... you may need to sign out of the cloud and restart your computer and log into the cloud for things to work

    Sign out of your account of cloud... Restart your computer... Connect to your paid account of cloud

    -Connect using http://helpx.adobe.com/x-productkb/policy-pricing/account-password-sign-faq.html

    -http://helpx.adobe.com/creative-cloud/kb/sign-in-out-creative-cloud-desktop-app.html

    -http://helpx.adobe.com/x-productkb/policy-pricing/activation-network-issues.html

    -http://helpx.adobe.com/creative-suite/kb/trial--1-launch.html

    -ID help https://helpx.adobe.com/contact.html?step=ZNA_id-signing_stillNeedHelp

    -http://helpx.adobe.com/creative-cloud/kb/license-this-software.html

    .

    If no

    This is an open forum, Adobe support... you need Adobe personnel to help

    Adobe contact information - http://helpx.adobe.com/contact.html

    Chat/phone: Mon - Fri 05:00-19:00 (US Pacific Time)<=== note="" days="" and="">

    -Select your product and what you need help with

    -Click on the blue box "still need help? Contact us. "

  • I suddenly (after 3 years) can't access my email accounts through Windows Live Mail.

    Technology service provider says it's a problem of Windows Live Mail. All elso works very well... Can anyone help? Here is the response of the software...

    Can't send or receive messages on behalf of Eastlink. The host 'pop.eastlink.ca' is not found. Please check that you have entered the server name correctly.  Server: 'pop.eastlink.ca' Windows Live Mail error ID: 0x800CCC0D Protocol: Port POP3: secure (SSL): No.

    Notes: Server name is entered correctly and the correct ID for the server:
    Any thoughts?

    Display the port number in the error message do not put you to any security risk. It is not specific to the user, this is the type of account. All POP3 users use the same ports. All uses of the IMAP use the same ports.

    Windows Live Mail help is in this forum, but you get no e generic response without the full error message.
    http://answers.Microsoft.com/en-us/windowslive/Forum/LIVEmail?tab=all

Maybe you are looking for