AnyConnect VPN connects to the work but not the House

Similar Questions

• I have created a VPN connection and it worked but you can't see how to remove Windows 7.

  Delete the VPN connection

  I have created a VPN connection and it worked but you can't see how to remove Windows 7.  I tried rt-click but no delete option.

  Open network and sharing Center. On the left side, click on change adapter settings. You will get all VPN connections that have been created and you can delete what you don't need.

• Anyconnect VPN connection kills the IP Communicator

  AnyConnect version 2.5.0217

  ASA 8.0.5

  IP Communicator 2.1.4

  Connection with Anyconnect and can access myremote network ok. If I run the IP Communicator application it fails to register and my remote access via Anyconnect stops working. I need IP Communicator to close and restart Anyconnect to retrieve my connection. Communicator IP works very well with the ipsec client. Any ideas?

  Hi Adam, a friend of long date!

  Bug looks like, I did the search in the database. This a resambles behavior...

  Bug ID: CSCte42788

  ASA anyconnect CONN DTLS is demolished when tftp error MSG is rvd-CPIC

  Symptom: ASA with DTLS anyconnect connection, when tftp inspection is enabled, if a TFTP file transfer is attempted the anyconnect client, and if the file is not found (or results in any TFTP error message returned), it disconnects intermittently the DTLS session also. This will cause a temporary stoppage of traffic because client anyconnect resets the connection. This is seen commonly in Cisco IP communicator when it attempts to use TFTP and the file is not on the server TFTP (call Manager). Conditions: (1) client TFTP and results in a TFTP error message (2) inspection TFTP is enabled Workaround solution: (1) disable the TFTP inspection (2) use TLS instead of DTLS

  Best regards

  Jorge

• I installed the Socks5 & IPIG connections & after my vpn connection simply stopped working.

  stopped my VPN connetion working.what I do?

  last night, I installed the Socks5 & IPIG connections & after my vpn connection simply stopped working. I don't know if it's because of Socks5 or IPIG connections but I tried everything, including the restoration of my windows & uninstallimg 2 connections, I even deleted all my internet connections, including vpn & them reinstalled but nothing worked.when I click the vpn connection, it just shows that this message saying could not be contacted.

  is my windows homebasic .plz help of vista...

  Hi Melanie,

  You can consult the following articles and check.

  You receive the error code 741 when you try to establish a VPN connection type PPTP on a computer running Windows Vista

  Troubleshooting remote access VPN

  If you are working on a domain environment, then you will need to contact the system administrator for assistance.

• I can connect to wifi everywhere, but at my house from Beach-Iphone 5 s - is not the wifi because I am about this with other devices

  I can connect to wifi everywhere, but at my house from Beach-Iphone 5 s - is not the wifi because I am about this with other devices

  General suggestions for Wi - Fi problems, maybe one of them will help you... especially #4.

  (1) perform a forced reboot: hold the Home and Sleep/Wake buttons simultaneously for about 15-20 seconds, until the Apple logo appears. Leave the device to reboot.

  (2) resetting the network settings: settings > general > reset > reset network settings. Join the network again.

  (3) change of Google DNS: settings > Wi - Fi > click the network, delete all the numbers under DNS and enter 8.8.8.8 or otherwise 8.8.4.4

  (4) reboot router/Modem: unplug power for 2 minutes and reconnect. Update the Firmware on the router (support Web site of the manufacturer for a new FW check). Also try different bands (2.4 GHz and 5 GHz) and different bandwidths (recommended for 2.4 to 20 MHz bandwidth).

  (5) disable the prioritization of device on the router if this feature is available.

  (6) determine if other wireless network devices work well (other iOS devices, Mac, PC).

  (7) try the device on another network, i.e., neighbors, the public coffee house, etc.

  (8) to restore the device (ask for more details if you wish).

  https://support.Apple.com/en-us/HT201252

  (9) go to the Apple Store for the evaluation of the material.

• Someone has changed my password to Icloud and lock my phone by finding my phone app now, can't activate my phone I have to do. My apple ID still works but not my Icloud how can I reset the password

  Some * changed my password to Icloud and lock my phone by finding my phone app

  What should I do now, I can not activate my phone. My apple ID still works but not my Icloud how can I reset the password

  ACCOUNT SAFETY CONTACT NUMBERS

• How to remove a domain controller that was removed from the Internet works but not demoted

  How to remove a domain controller that has been remove from the Internet works but not demoted

  got two domain controllers and been deleted but not retrograde

  can help pls

  Hello

  Your Windows is better suited for the directory on TechNet Services. You can follow the link to ask your question: http://social.technet.microsoft.com/Forums/en-us/winserverDS/threads

  I hope this helps.

• I have tossiba laptop when I try music on my laptop speaker works but not the headphones work even not pregnant

  I tossiba laptope when I try music on my laptop speaker works but not the headphones speakers not even extra work

  Hi rajuarman,

  -Headset works fine on other computers?

  -Have you installed the audio drivers on your computer?

  -Not the problem only occurs when trying to play music in Internet Explorer?

  Your question does contain all the required information necessary for us to help you. Please include more information to continue troubleshooting as a result.

  Please see How to ask questions and provide the information required to help others.

  In the meantime, check out these articles:

  Tips for solving common audio problems

  No sound in Windows

• I just bought a new Airport Express Terminal. It connects to my laptop, but not my other devices such as iphone/ipad. Any suggestions?

  I just bought a new Airport Express Terminal. It connects to my laptop and I have working internet, but my iphone/ipad do not work with it. They say they are "connected" to the wireless network but nothing works / charges on other devices. I tried to forget the network, by renewing the lease, etc and nothing works. Any suggestions as to why my laptop works but not other devices?

  What is the serial number and model of the modem you use?... or... The AirPort Express connects directly to the Ethernet wall port?

• Establish the VPN connection before the user logged

  Hello world!

  Anyone know if it is possible to run the cisco vpn client and establish the vpn connection before the user logs (Windows 7)? How?

  Thanks in advance!

  You must Anyconnect VPN.

  use start before logon feature you can get the VPN before windows logon.

  There are a lot of configuration guide that you can find in CISOC regarding anyconnect SBL.

• I found an old vista home basic dvd with a key, how can check whether key works but not install it?

  I found an old vista home basic dvd with a key, how can check whether key works, but not install it? some dvd install can be live boot from themselves too [password required for a direct start?]?

  Hello

  You must install it to see if it is legal to do so.

  There is no public database of product keys.

  See you soon.

• AnyConnect VPN connected but not in LAN access

  Hello

  I just connfigured an ASA to remote VPN. I think everything works but I do not have access

  for customers in the Local LAN behind the ASA.

  PC <==internet==>outside of the SAA inside<=LAN=> PC

  After AnyConnect has established the connection I can ping inside the Interface of the ASA

  but I can't Ping the PC behind the inside Interface.

  Here is the config of the ASA5505:

  : Saved

  :

  ASA Version 8.2 (1)

  !

  asa5505 hostname

  activate 8Ry2YjIyt7RRXU24 encrypted password

  2KFQnbNIdI.2KYOU encrypted passwd

  names of

  !

  interface Vlan1

  nameif inside

  security-level 100

  IP 192.168.1.1 255.255.255.0

  !

  interface Vlan2

  nameif outside

  security-level 0

  IP 192.168.178.254 255.255.255.0

  !

  interface Ethernet0/0

  switchport access vlan 2

  !

  interface Ethernet0/1

  !

  interface Ethernet0/2

  Shutdown

  !

  interface Ethernet0/3

  Shutdown

  !

  interface Ethernet0/4

  Shutdown

  !

  interface Ethernet0/5

  Shutdown

  !

  interface Ethernet0/6

  Shutdown

  !

  interface Ethernet0/7

  Shutdown

  !

  passive FTP mode

  Inside_ICMP list extended access permit icmp any any echo response

  Inside_ICMP list extended access permit icmp any any source-quench

  Inside_ICMP list extended access allow all unreachable icmp

  Inside_ICMP list extended access permit icmp any one time exceed

  access-list outside_cryptomap_2 note ACL traffic von ASA5505 zur ASA5510

  outside_cryptomap_2 to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.10.0 255.255.255.0

  no_NAT to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.10.0 255.255.255.0

  no_NAT to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.178.0 255.255.255.0

  tunnel of splitting allowed access list standard 192.168.1.0 255.255.255.0

  pager lines 24

  Within 1500 MTU

  Outside 1500 MTU

  mask 192.168.1.10 - 192.168.1.15 255.255.255.0 IP local pool SSLClientPool

  ICMP unreachable rate-limit 1 burst-size 1

  don't allow no asdm history

  ARP timeout 14400

  Global 1 interface (outside)

  NAT (inside) 0-list of access no_NAT

  NAT (inside) 1 192.168.1.0 255.255.255.0

  Access-group Inside_ICMP in interface outside

  Route outside 0.0.0.0 0.0.0.0 192.168.178.1 1

  Route outside 192.168.10.0 255.255.255.0 192.168.178.230 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

  timeout tcp-proxy-reassembly 0:01:00

  dynamic-access-policy-registration DfltAccessPolicy

  AAA authentication http LOCAL console

  Enable http server

  http 192.168.1.0 255.255.255.0 inside

  No snmp server location

  No snmp Server contact

  Server enable SNMP traps snmp authentication linkup, linkdown cold start

  Crypto ipsec transform-set-3DESSHA FRA esp-3des esp-sha-hmac

  life crypto ipsec security association seconds 28800

  Crypto ipsec kilobytes of life - safety 4608000 association

  card crypto outside_map 2 match address outside_cryptomap_2

  peer set card crypto outside_map 2 192.168.178.230

  card crypto outside_map 2 game of transformation-FRA-3DESSHA

  outside_map interface card crypto outside

  Crypto ca trustpoint localtrust

  registration auto

  domain name full cisco - asa5505.fritz.box

  name of the object CN = cisco - asa5505.fritz.box

  sslvpnkeypair key pair

  Configure CRL

  Crypto ca certificate chain localtrust

  certificate fa647850

  3082020b a0030201 30820174 020204fa 0d06092a 64785030 864886f7 0d 010104

  0500304 06035504 03131763 6973636f 617361 35353035 2e667269 2d 3120301e a

  747a2e62 6f783126 30240609 2a 864886 f70d0109 02161763 6973636f 2d 617361

  2e667269 35353035 747a2e62 6f78301e 170d 3132 31303132 31383434 31305a 17

  323231 30313031 38343431 06035504 03131763 6973636f 3120301e 305a304a 0d

  617361 35353035 2e667269 747a2e62 6f783126 2a 864886 30240609 f70d0109 2D

  6973636f 02161763 2d 617361 35353035 2e667269 747a2e62 6f783081 9f300d06

  d6279e1c 8181009f 092a 8648 86f70d01 01010500 03818d 30818902 00 38454fc 9

  705e1e58 762edc35 e64262fb ee55f47b 8d62dda2 102c8a22 c97e395f 2a9c0ebb

  f2881528 beb6e9c3 89d91dda f7fe77a4 2a1fda55 f8d930b8 3310a05f 622dfc8f

  d48ea749 7bbc4520 68 has 06392 d65d3b87 0270e41b 512a4e89 94e60167 e2fa854a

  87ec04fa e95df04f 3ff3336e c7437e30 ffbd90b5 47308502 03010001 300 d 0609

  2a 864886 04050003 81810065 cc9e6414 3c322d1d b191983c 97b474a8 f70d0101

  2e5c7774 9d54d3ec fc4ee92d c72eef27 a79ce95a da83424f b05721c0 9119e7ea

  c5431998 e6cd8272 de17b5ff 5b1839b5 795fb2a0 2d10b479 056478fa 041555dd

  bfe3960a 4fe596ec de54d58b a5fa187e 5967789a a26872ef a33b73ec 7d7673b9

  c8af6eb0 46425cd 2 765f667d 4022c 6

  quit smoking

  crypto ISAKMP allow outside

  crypto ISAKMP policy 1

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  crypto ISAKMP policy 65535

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  Telnet timeout 5

  SSH timeout 5

  Console timeout 0

  management-access inside

  a basic threat threat detection

  Statistics-list of access threat detection

  no statistical threat detection tcp-interception

  localtrust point of trust SSL outdoors

  WebVPN

  allow outside

  SVC disk0:/anyconnect-win-2.3.0254-k9.pkg 1 image

  SVC disk0:/anyconnect-wince-ARMv4I-2.3.0254-k9.pkg 2 image

  enable SVC

  tunnel-group-list activate

  internal SSLClientPolicy group strategy

  attributes of Group Policy SSLClientPolicy

  VPN-tunnel-Protocol svc

  Split-tunnel-policy tunnelspecified

  Split-tunnel-network-list value split tunnel

  the address value SSLClientPool pools

  WebVPN

  SVC Dungeon-Installer installed

  time to generate a new key of SVC 30

  SVC generate a new method ssl key

  SVC request no svc default

  username password asdm privilege Yvx83jxa2WCRAZ/m number 15

  hajo 2w8CnP1hHKVozsC1 encrypted password username

  hajo attributes username

  type of remote access service

  tunnel-group 192.168.178.230 type ipsec-l2l

  IPSec-attributes tunnel-group 192.168.178.230

  pre-shared-key *.

  type tunnel-group SSLClientProfile remote access

  attributes global-tunnel-group SSLClientProfile

  Group Policy - by default-SSLClientPolicy

  tunnel-group SSLClientProfile webvpn-attributes

  enable SSLVPNClient group-alias

  !

  class-map inspection_default

  match default-inspection-traffic

  !

  !

  type of policy-card inspect dns preset_dns_map

  parameters

  message-length maximum 512

  Policy-map global_policy

  class inspection_default

  inspect the preset_dns_map dns

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the netbios

  inspect the rsh

  inspect the rtsp

  inspect the skinny

  inspect esmtp

  inspect sqlnet

  inspect sunrpc

  inspect the tftp

  inspect the sip

  inspect xdmcp

  !

  global service-policy global_policy

  context of prompt hostname

  Cryptochecksum:0008564b545500650840cf27eb06b957

  : end

  What wrong with my setup.

  Concerning

  Hans-Jürgen Guenter

  Hello Hans,.

  You should change your VPN pool to be a different subnet within the network, for example: 192.168.5.0/24

  Then configure NAT exemption for traffic between the Interior and the pool of vpn.

  Based on your current configuration, the following changes:

  mask 192.168.5.10 - 192.168.5.15 255.255.255.0 IP local pool SSLClientPool

  no_NAT to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.5.0 255.255.255.0

  And then also to enable icmp inspection:

  Policy-map global_policy

  class inspection_default

  inspect the icmp

• The Cisco AnyConnect VPN connection host bridge/NAT comments

  I think I know the answer to that, but I hope I'm wrong. I have 9 Workstation on a Windows 7 laptop, and I wonder if it is possible to get my guest VM (Windows and non-Windows (if it matters)) to have access to my VPN connection when I am connected. Preferably through NAT, if it is then connected by a bridge. I found this post where the poster indicates that you can deselect 'connect the adapter to the virtual host' and he's got to work, but this does not work for me, unless I'm missing something or it depends on the type of VPN connection or installation. I read that you can not address IPSec VPN, but I don't know what type I'm sure I can't say the AnyConnect client.

  Thank you
  Brian

  By default the anyconnect software won't allow all connections to the VPN tunnel. So once the connection is established you can not connect to the host on the local network more.

  If you do a 'route print' on the host before and after the VPN connection is established, you will find that the VPN connection has set the parameter WOG network for the lowest value which makes the default and sets a mask that blocks all other connections. You can remove the mask route to access the host on the local network, but you will not get a direct connection to the virtual machine VPN tunnel.

  If you search the forum here for VPN, you can find a post about this.

• Running the logon script after AnyConnect VPN connection

  Is it possible (such as the Launcher on the IPSec client) to run a login script after establishing a VPN connection? When a user connects to the VPN client AnyConnect I need to be able run a login script to map drives. I looked the ASDM, but see anywhere that it seems that this would be configured. I thought I would check to make sure I'm not missing something.

  We lack ASA IOS v8.2 (2), ASDM 6.2 (5).

  Thank you.

  You can learn more about the AnyConnect script capabilities on the link below...

  http://www.Cisco.com/en/us/docs/security/vpn_client/AnyConnect/anyconnect25/Administration/Guide/ac03features.html#wp1068902

• IPSec VPN: connected to the VPN but cannot access resources

  Hello

  I configured a VPN IPSec on two ISP with IP SLA configured, there is a redundancy on the VPN so that if address main is it connect to the VPN backup.

  QUESTIONS

  -Connect to the primary address and I can access resources

  -backup address to connect but can not access resources for example servers

  I want a way to connect to backup and access on my servers resources. Please help look in the config below

  configuration below:

  interface GigabitEthernet0/0

  LAN description

  nameif inside

  security-level 100

  IP 192.168.202.100 255.255.255.0

  !

  interface GigabitEthernet0/1

  Description CONNECTION_TO_DOPC

  nameif outside

  security-level 0

  IP address 2.2.2.2 255.255.255.248

  !

  interface GigabitEthernet0/2

  Description CONNECTION_TO_COBRANET

  nameif backup

  security-level 0

  IP 3.3.3.3 255.255.255.240

  !

  !

  interface Management0/0

  Shutdown

  No nameif

  no level of security

  no ip address

  management only

  !

  boot system Disk0: / asa831 - k8.bin

  boot system Disk0: / asa707 - k8.bin

  passive FTP mode

  clock timezone WAT 1

  DNS domain-lookup outside

  DNS server-group DefaultDNS

  Name-Server 4.2.2.2

  permit same-security-traffic inter-interface

  permit same-security-traffic intra-interface

  network of object obj-200

  192.168.200.0 subnet 255.255.255.0

  Description LAN_200

  network of object obj-202

  192.168.202.0 subnet 255.255.255.0

  Description LAN_202

  network of the NETWORK_OBJ_192.168.30.0_25 object

  subnet 192.168.30.0 255.255.255.128

  network of the RDP_12 object

  Home 192.168.202.12

  Web server description

  service object RDP

  source eq 3389 destination eq 3389 tcp service

  network obj012 object

  Home 192.168.202.12

  the Backup-PAT object network

  192.168.202.0 subnet 255.255.255.0

  NETWORK LAN UBA description

  the DM_INLINE_NETWORK_1 object-group network

  object-network 192.168.200.0 255.255.255.0

  object-network 192.168.202.0 255.255.255.0

  the DM_INLINE_NETWORK_2 object-group network

  network-object object obj-200

  network-object object obj-202

  access-list extended INSIDE_OUT allow ip 192.168.200.0 255.255.255.0 any

  access-list extended INSIDE_OUT allow ip 192.168.202.0 255.255.255.0 any

  OUTSIDE_IN list extended access permit icmp any any idle state

  OUTSIDE_IN list extended access permit tcp any object obj012 eq inactive 3389

  gbnltunnel_splitTunnelAcl standard access list allow 192.168.200.0 255.255.255.0

  standard access list gbnltunnel_splitTunnelAcl allow 192.168.202.0 255.255.255.0

  BACKUP_IN list extended access permit icmp any any idle state

  access extensive list ip 196.216.144.0 encrypt_acl allow 255.255.255.192 192.168.202.0 255.255.255.0

  pager lines 24

  Enable logging

  asdm of logging of information

  Within 1500 MTU

  Outside 1500 MTU

  backup of MTU 1500

  Backup2 MTU 1500

  local pool GBNLVPNPOOL 192.168.30.0 - 192.168.30.100 255.255.255.0 IP mask

  no failover

  ICMP unreachable rate-limit 1 burst-size 1

  ICMP allow any backup

  ASDM image disk0: / asdm-645 - 206.bin

  don't allow no asdm history

  ARP timeout 14400

  NAT (inside, outside) static static source NETWORK_OBJ_192.168.30.0_25 destination DM_INLINE_NETWORK_1 DM_INLINE_NETWORK_1 NETWORK_OBJ_192.168.30.0_25

  NAT (inside, outside) static source DM_INLINE_NETWORK_2 DM_INLINE_NETWORK_2 NETWORK_OBJ_192.168.30.0_25 NETWORK_OBJ_192.168.30.0_25 non-proxy-arp-search of route static destination

  !

  network of object obj-200

  NAT dynamic interface (indoor, outdoor)

  network of object obj-202

  dynamic NAT (all, outside) interface

  network obj012 object

  NAT (inside, outside) interface static service tcp 3389 3389

  the Backup-PAT object network

  dynamic NAT interface (inside, backup)

  !

  NAT source auto after (indoor, outdoor) dynamic one interface

  Access-group interface inside INSIDE_OUT

  Access-group OUTSIDE_IN in interface outside

  Access-group BACKUP_IN in the backup of the interface

  Route outside 0.0.0.0 0.0.0.0 2.2.2.2 1 followed by 100

  Backup route 0.0.0.0 0.0.0.0 3.3.3.3 254

  Timeout xlate 03:00

  Pat-xlate timeout 0:00:30

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

  timeout tcp-proxy-reassembly 0:01:00

  Floating conn timeout 0:00:00

  dynamic-access-policy-registration DfltAccessPolicy

  WebVPN

  value of the URL-list GBNL-SERVERS

  identity of the user by default-domain LOCAL

  the ssh LOCAL console AAA authentication

  AAA authentication http LOCAL console

  AAA authentication enable LOCAL console

  http server enable 441

  http 192.168.200.0 255.255.255.0 inside

  http 192.168.202.0 255.255.255.0 inside

  http 192.168.2.0 255.255.255.0 inside

  http 192.168.30.0 255.255.255.0 inside

  http 0.0.0.0 0.0.0.0 outdoors

  http 0.0.0.0 0.0.0.0 backup

  No snmp server location

  No snmp Server contact

  Server enable SNMP traps snmp authentication linkup, linkdown warmstart of cold start

  ALS 10 monitor

  type echo protocol ipIcmpEcho 31.13.72.1 interface outside

  NUM-package of 5

  Timeout 3000

  frequency 5

  Annex monitor SLA 10 life never start-time now

  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac

  Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac

  Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac

  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac

  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set

  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

  card crypto IPSec_map 10 corresponds to the address encrypt_acl

  card crypto IPSec_map 10 set peer 196.216.144.1

  card crypto IPSec_map 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  inside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  inside crypto map inside_map interface

  ipsec_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  ipsec_map interface card crypto outside

  gbnltunnel card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  backup of crypto gbnltunnel interface card

  Crypto ca trustpoint ASDM_TrustPoint0

  Terminal registration

  name of the object CN = GBNLVPN.greatbrandsng.com, O = GBNL, C = ng

  Configure CRL

  Crypto ikev1 allow inside

  Crypto ikev1 allow outside

  Crypto ikev1 enable backup

  IKEv1 crypto policy 10

  authentication crack

  aes-256 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 20

  authentication rsa - sig

  aes-256 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 30

  preshared authentication

  aes-256 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 40

  authentication crack

  aes-192 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 50

  authentication rsa - sig

  aes-192 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 60

  preshared authentication

  aes-192 encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 70

  authentication crack

  aes encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 80

  authentication rsa - sig

  aes encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 90

  preshared authentication

  aes encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 100

  authentication crack

  3des encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 110

  authentication rsa - sig

  3des encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 120

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 130

  authentication crack

  the Encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 140

  authentication rsa - sig

  the Encryption

  sha hash

  Group 2

  life 86400

  IKEv1 crypto policy 150

  preshared authentication

  the Encryption

  sha hash

  Group 2

  life 86400

  enable client-implementation to date

  !

  track 10 rtr 100 accessibility

  !

  Track 100 rtr 10 accessibility

  Telnet 192.168.200.0 255.255.255.0 inside

  Telnet 192.168.202.0 255.255.255.0 inside

  Telnet timeout 5

  SSH 192.168.202.0 255.255.255.0 inside

  SSH 192.168.200.0 255.255.255.0 inside

  SSH 0.0.0.0 0.0.0.0 inside

  SSH 0.0.0.0 0.0.0.0 outdoors

  SSH 0.0.0.0 0.0.0.0 backup

  SSH timeout 30

  SSH group dh-Group1-sha1 key exchange

  Console timeout 0

  management-access inside

  a basic threat threat detection

  threat detection statistics

  a statistical threat detection tcp-interception rate-interval 30 burst-400-rate average rate 200

  WebVPN

  allow outside

  enable backup

  activate backup2

  internal gbnltunnel group policy

  attributes of the strategy of group gbnltunnel

  Ikev1 VPN-tunnel-Protocol

  Split-tunnel-policy tunnelspecified

  greatbrandsng.com value by default-field

  Group Policy 'Group 2' internal

  type of remote access service

  type tunnel-group gbnltunnel remote access

  tunnel-group gbnltunnel General-attributes

  address GBNLVPNPOOL pool

  Group Policy - by default-gbnltunnel

  gbnltunnel group of tunnel ipsec-attributes

  IKEv1 pre-shared-key *.

  type tunnel-group GBNLSSL remote access

  type tunnel-group GBNL_WEBVPN remote access

  attributes global-tunnel-group GBNL_WEBVPN

  Group Policy - by default-gbnltunnel

  tunnel-group 196.216.144.1 type ipsec-l2l

  IPSec-attributes tunnel-group 196.216.144.1

  IKEv1 pre-shared-key *.

  !

  class-map inspection_default

  match default-inspection-traffic

  !

  !

  type of policy-card inspect dns preset_dns_map

  parameters

  maximum message length automatic of customer

  message-length maximum 512

  Policy-map global_policy

  class inspection_default

  inspect the preset_dns_map dns

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the rsh

  inspect the rtsp

  inspect esmtp

  inspect sqlnet

  inspect the skinny

  inspect sunrpc

  inspect xdmcp

  inspect the sip

  inspect the netbios

  inspect the tftp

  Review the ip options

  inspect the icmp

  !

  global service-policy global_policy

  context of prompt hostname

  no remote anonymous reporting call

  HPM topN enable

  Cryptochecksum:6004bf457c9c0bc1babbdbf1cd8aeba5

  : end

  When you say that "the external interface is downwards using failover techniques" you mean this failover occurred because the ASA is no longer able to reach the 31.13.72.1?  Not that the actual interface is broken?

  If this is the case, then the NATing is your problem.  Since you're using the same VPN pool for VPN connections the ASA cannot distinguish between the two streams of traffic if the external interface is still in place.  The SLA tracking only removes a route in the routing table, but does not affect what happens in the NAT process.

  try to change the NAT statement follows him and the test (don't forget to remove the other statements to exempt of NAT for this traffic during the test):

  NAT (inside,any) static static source NETWORK_OBJ_192.168.30.0_25 destination DM_INLINE_NETWORK_1 DM_INLINE_NETWORK_1 NETWORK_OBJ_192.168.30.0_25

  If this does not work, I would either turn off the external interface when a failover occurs, or create a second connection profile that contains a separate mass of IP for the VPN connection and ask users to connect using this profile when a failover takes place.  Don't forget to create Nat exempt instructions for this traffic also.

  --

  Please note all useful posts