ASA does not propagate any routes for VPN users

Good afternoon

I m a problem concerning the spread of the roads to authenticated VPN users through the asa tunnel-group.

I have a VPN-users-pool where my users receive their IP address, and after authentication and the tunnel is established the idea is that the user get to the networks defined in the following ACL:

access-list within the standard allow 10.1.0.0 255.255.0.0

access-list within the standard allow 192.168.15.0 255.255.224.0

Now, the problem is that, after the tunnel is set up the only way, that the user receives is the default route (which is not supposed to be sent). The user does not receive the roads specified in the ACL list above. It has not received the network mask and assumes one 8 netmask (given that the pool of network from where it receives the IP address is a class A network).

Network routing works as expected (when I add the static routes directly to PC users, everything works OK). It s just the matter of the ASA do not spread the roads as it should.

Here is my split tunneling settings:

attributes of Group Policy DefaultRAGroup

VPN-idle-timeout 1

Protocol-tunnel-VPN l2tp ipsec

disable the PFS

Split-tunnel-policy tunnelspecified

Split-tunnel-network-list value inside

(...)

attributes of Group Policy DfltGrpPolicy

Split-tunnel-policy tunnelspecified

Split-tunnel-network-list value inside

(...)

Any ideas?

I have apreciate your help

Best regards

Just a question, I see:

attributes of Group Policy DefaultRAGroup

Protocol-tunnel-VPN l2tp ipsec

Split-tunnel-policy tunnelspecified

Split-tunnel-network-list value inside

internal DefaultRAGroup_1 group strategy

attributes of Group Policy DefaultRAGroup_1

Split-tunnel-policy tunnelspecified

It looks like your policy

DefaultRAGroup_1 you set ACLs and the other doesn't seem to be for L2TP/IPSEC. How do you connect to the ASA, using L2TP/IPSEC or Cisco IPSEC client? In addition, if your users are devoted to this group policy:

DefaultRAGroup_1 it looks like the acl is missing for the split tunneling

Tags: Cisco Security

Similar Questions

  • Windows 7 does not provide any warning if other users are connected to our computer on shutdown.

    We have problems when we close our main computer and break the network connection with others inadvertently connected users.  In researching the problem, we find a lot of people who want to disable the warning to farm.  Our problem is exactly the opposite, but the warning message before stopping.  The problem is frustrating currently our users who are unexpectedly fell and continue this bad practice strong risk of work lost and corrupted files.

    Please ask us about how do to Activate the warning as "that other users are logged on our main computer" before closing.  Thanks for any help.

    Assuming that you are referring to the management of an enterprise network:

    Post your question somewhere around here instead:

    http://TechNet.Microsoft.com/forums

  • Lightroom does not recognize any of my file types [DNG / JPEG etc] and is unable to import? any ideas for a fix?

    Lightroom does not recognize any of my file types [DNG / JPEG etc] and is unable to import? any ideas for a fix?

    It's impossible. LR is a non-destructive editor and photo management. For her to not see images of the files would make it one of the worst of these programs tyupes.

    So there is a parameter that you have screwed up in the import dialog window that prevents your DNG, TIFF, JPG, PSD, PNG, CMYK and film formats appear in the import window.

    So show us a screenshot of your import window.

    More than likely you have chosen a destination that has all the permissions read/write to your username.

  • I am trying to create layers with a JPEG originally published in LR6. I converted the JPEG in a TIF format for my PES 11. PSE does not recognize the file for purposes of superposition; None of the routes command works. Just to see if PES was grateful the

    I am trying to create layers with a JPEG originally published in LR6. I converted the JPEG in a TIF format for my PES 11. PSE does not recognize the file for purposes of superposition; None of the routes command works. Just to see if PES was grateful the file at all, I tried to turn the file. Fortunately, he rotates the photo and turned it back. Why the program allow me to create layers?

    You click on Expert in pse before trying to add layers?

    Or it is possible that the image is 16-bit/channel.

    In photoshop elements go to Image > Mode and click on 8-bit/channel and see if that makes a difference.

  • I'm locked out of my iphone5 not connected to my wifi at home and my home button does not work, any ideas on how to fix?

    I'm locked out of my iphone5 not connected to my wifi at home and my home button does not work, any ideas on how to fix?

    < re-titled by host >

    Take it to an Apple Store for repair or replacement.

  • Firefox does not open any window, on the menu bar that appears only in the menu "Firefox".

    This is happening to me since OSX Yosemite. Always the same in ElCapitan. Tried to remove and clean install FF, without success. I can't access what anyone, it does not open any other window, no preference do nothing.

    Hi again,

    no window-> no Burger.

    In the meantime, I was able to fix: FF installed in SafeMode to OSX. It works for me now in El Capitan, previously in Yosemite, it had no effect.

  • Why apple card app does not show the routes and directions between two places in India in an iphone 6 s more?

    map does not show the routes and directions

    This feature is not yet supported in India.

    http://www.Apple.com/in/iOS/feature-availability/#maps-directions

    In addition, your phone may be overheating for a number of reasons. The most common of which is low service area.

    Your attributes from battery to the majority of the production of heat, then adjust settings to put less load on the farm in general will help some.

    http://www.Apple.com/batteries/maximizing-performance/#iOS

  • Pages does not open any file more except models

    From one day to the other Pages 5.6.1 does not open any more files on my MacBook Pro with OS X 10.11.3. I tried all means: 'Open recent', 'open... '. ","With "Open Pages", without result. A restart does not help. Best regards.

    Hi Ciroamos,

    I understand that you're having trouble to open a document Pages 5.6.1 on your MacBook Pro.  Have you recently updated or changed on demand?  Have you tried to open a Pages document on icloud drive, in addition to your computer? One thing I would try is to use Time Machine and go back to an earlier date and see if you can open a document.  If you can't, then you must uninstall the application Pages and re-download from the Mac App Store.

    I would add some information below to help you with these troubleshooting steps.

    Mac OS X: how to solve a software problem

    Use Time Machine to back up or restore your Mac

    Restore specific files:

    1. Enter in Time Machine, choose the Time Machine menu , or click on the Time Machine in the Dock.

    2. Find files to restore:
      • Use the timeline on the edge of the screen to see your Time Machine backup files, as they were at this date and time. The timeline may also include a snapshots the.
      • Use of the screen and down arrows to reach the last time the content of the window changes. You can also use the search field in a window to find a file and then move through time, well that centered on the changes to this file.
      • Select a file, then press the SPACEBAR to preview the file and make sure it is the one you want.
    3. Click on restore to restore the selected file, or Ctrl-click the file for other options.

    Download your latest purchases

    Redownload an app

    On a Mac or a PC

    You can redownload the apps for iOS in iTunes devices and applications for your computer in the Mac App Store.

    Since the Mac App Store

    1. Open the Mac App Store.
    2. From the top of the window, click on purchases. Your purchased apps will appear.
    3. Scroll down to find the application you want to download.
    4. Click on install or download to the right of the item you want to download. Your application will download to your computer.

    Take care

  • does not load any page as a commom user, works well as an administrator

    I've been running Firefox for centuries now, no problems previously.
    All of a sudden it does not load any page when I launch FF as a normal user. If I run FF as admin, everything works as it should.

    Hello Tyler.
    Thank you for your quick response.

    Unfortunally suggestions do not solve the problem.
    I discovered that it is in the antivirus (AVG). Once I turned off AVG, FF works as it should.
    One way or another AVG don't like FF.

    In retrospect, the problem started with the AVG Free upgrade to the paid version.
    I'll send moy.
    If the issue is resolved, I'll send another answer.
    SeeYou,
    Willem

  • Satellite M40X-116 - drive does not recognize any CD or DVD

    Hi all!

    I have a big problem with my SATELLITE M40X-116; I was watching a movie when the image was just stopped and since my CD/DVD RAM drive does not recognize any CD or DVD. What can I do?
    Please I need your help as soon as POSSIBLE.
    If you know what could be the problem, please, just send an e-mail to [email protected]
    Thank you all for the cooperation
    Best regards
    Marian - Romania

    Hello

    to me, this looks like a hardware problem. It must be checked by the service, and perhaps that the drive must be replaced.

    Good bye

  • DVGW/hd ts-l802a does not see any DVD/CD

    first DVD worked fine, but when I read the second DVD, it's a ticking hard sound.
    end now, he does not see any DVD/CD / audio CD.

    Is there someone who has / have had this same problem or is there someone who can help me with this problem?

    Hello!

    You must give us a little more information such as your laptop model and the OS.

    However, maybe it could be useful for you:
    http://support.Microsoft.com/kb/314060

    You can boot from a CD like Linux boot disk?

    Good bye

  • Once I changed my ISP my computer network does not work and does not recognize my router lynsys

    Once I changed my ISP my computer network does not work and does not recognize my router lynsys

    Hi George,.
    Please go to the Microsoft Community Forums.
     
    1. do you get an error message?
    2. do you have the internet connection wired or wireless?
    3. What is the brand and model of the computer?
     
    I suggest to refer to the links and follow the steps in the articles:
     
    Wireless and wired network problems
     
    Resources for the resolution of the problems of modem in Windows XP
     
    How to troubleshoot wireless network connections in Windows XP Service Pack 2
     
    How to reset the Protocol Internet (TCP/IP)
     
    If the problem persists, contact the Internet service provider for assistance.
     
    I hope this helps.
  • Windows XP does not detect any internet at all despite the computer with the modem to work.

    I recently installed Windows XP Professional on my new iMac via bootcamp.  While Windows itself works fine, it won't connect to internet at all.  Despite being connected to a modem ADSL via a Ethernet cable, and also have wireless internet, Windows does not detect any signal.  On the internet in the Control Panel, all connections page that appears is "1394 connection" under the heading "LAN or Internet high speed."  I tried several times to put in place a new internet connection through the Setup Wizard and everytime, no internet is detected.

    I know that the modem works because all the other computers in my house are fine online, including on the side of Mac of the iMac.  If anyone has an idea as to how I should resolve this problem, your help would be greatly appreciated!

    Thank you

    Daniel

    Moreover, these are things I've already tried:

    I've tried to manually and automatically set up an internet connection
    I spoke with my ISP, the modem works fine
    I have re-partitioned the hard drive and reinstalled XP

    The "1394 connection" is the IEEE 1394 (FireWire) from your computer.  There should be cable system and under the heading wireless connections "LAN or Internet high speed."   There is no need to run the Network Setup Wizard or set up a new connection.

    Open the Device Manager (Start > run > devmgmt.msc ) and go to the network adapters section.  You may need to install the drivers for them.

  • My floppy drive is not reading the disks. Device Manager does not detect any problems, I uninstalled and reinstalled the drivers. What should I do now?

    My floppy drive is not reading the disks. Device Manager does not detect any problems, I uninstalled and reinstalled the drivers.
    Convenience store said to click on properties Insert the diskette and
    Double click on open, but when I do that it stop computer
    and opens the recovery and ask for a correct diskette,

    Hello Tallm,

    Thank you for your message.  Did you get your floppy drivers of your installation diskettes?  If so, go to the website of the manufacturer of your computer and download/install the latest drivers.  Please let us know if this or help to solve your problem.
    See you soon

    Engineer Jason Microsoft Support answers visit our Microsoft answers feedback Forum and let us know what you think.

  • The settings saved on this computer does not meet the requirements for the network

    My old laptop connects fine but my other not.  When I go to connect to the network, it says "the settings saved on this computer does not match the requirements for the network."

    Hello Tazdmx83,

    Thanks for posting on Microsoft answers Community Forums.

    This problem usually occurs on wireless network connections. I suggest that you turn off any wireless security feature by following the steps below.

    1. click on start and control access panel.

    2. double-click on network connections

    3. right click on the wireless adapter and select Properties.

    4. Select wireless networks, click the name of your wireless network and choose Properties.

    5. in network authentication, select open to disable wireless security.

    6. Please try to connect.

    If the problem persists, I suggest that you remove the connection and re-create the wireless network connections. The following Web site can help you on the creation of the wireless connection.

    http://windowshelp.Microsoft.com/Windows/en-us/help/297fa2dc-B20B-4327-B673-707a968c86801033.mspx

    Important note: Microsoft provides third-party contact information to help you find technical support. These details may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

    If the problem persists, I suggest you reinstall the driver of card wireless network and Re-create the connection.

    Remove the driver for the card
    ========================

    1. click on start. In the start search box type "devmgmt.msc", and then press ENTER.
    2. expand "Network adapters", double-click the entry for the wireless network device.
    3. click on the "Driver" tab, click "Uninstall".
    4. click on start. In the start search box type "appwiz.cpl", and then press ENTER.
    5 remove the entries related to the wireless network adapter.

    Reinstall the driver with your CD of drivers on the manufacturer's Web site. After installation, create the connection.

    Also access the link and try to follow the steps in troubleshooting network related issues on Vista-based computer:

    http://windowshelp.Microsoft.com/Windows/en-us/help/33307acf-0698-41ba-B014-ea0a2eb8d0a81033.mspx

    It will be useful.

    Thank you and best regards,

    Srinivas

    Microsoft Answers Support Engineer

    Visit our Microsoft answers feedback Forum and let us know what you think

Maybe you are looking for