How to add an external IP address to a split tunnel?

Hello

I've set up VPN access on my ASA box as customers use a split tunnel so that only on our internal network traffic through the tunnel. Now, I need to add an external IP address to this tunnel. Is this possible, and if so, how can I achieve that? Just add the address to the list of tunnel network does not; If I do this, the client cannot connect to the external address at all.

Can anyone help?

Cheers, Georg.

Hello

Will need to see some configurations.

Usually incoming VPN traffic bypasses ACL interface. If you have the default setting, you will need to allow traffic to the pool/subnet VPN server. Unless of course the server already has a rule that allows traffic to a "some" source address.

Also a likely problem may be your NAT configuration.

The local IP address of the server the public IP address is included in the current NAT0 configurations for the VPN connection? If yes then which will probably cause problems for connections to its public IP address. Traffic could be abandoned due to a RPF NAT audit that basically checks the NAT that corresponds to the traffic in the opposite direction.

Therefore to confirm the above things, or share configurations, then we can do it.

To my knowledge by adding the address IP of the Split tunnel should naturally also be taken.

EDIT: The number of the station 6000

-Jouni

Tags: Cisco Security

Similar Questions

  • How to add a second IP address to the external network

    I have two NETWORK cards that I use for virtual machines (an internal and an external), and virtual switches have been created for each of them. My ESX Server already has an internal IP address, how do I add a second external IP address without deleting the first? I try to create a new switch, but the menu of default gateway DNS pointing to the first switch, and I don't want to remove this info.

    Network interface cards for the use of Virtual Machines require no IP addresses, they relay the traffic using the IP address found in the virtual machine. You try to add an additional service console to be accessible through this external connection? Announcement may be a print screen of your configuration might help to understand what you do and what you hope to accomplish.

  • How to add the external library in the folder path of class for use in Java outgoing call?

    Hello

    I work with the OSB 12 c under Jdeveloper Java legend item.

    Thing is pot I use to perform the conversion from json to xml that use external libraries.

    When I give my jar to java legend project reference it doen't find external libraries.

    Could you please tell me how to add external libraries in the class path folder or use to add it via web logic Server?

    Thank you

    Pavan

    Hello

    Thanks, I solved a problem.

    We can add the following in windows pc path:

    C:\Users\your_usename\AppData\Roaming\JDeveloper\system12.1.3.0.41.140521.1008\DefaultDomain\lib

    We add your external lib here and restart the weblogic server instance.

    Now you have this external lib or jar in use.

    Cool!

  • How to add an external url link to a navagation button in Dreamweaver Cs5.5

    How or can I add an external url link to a navagation button in Dreamweaver Cs5.5. If I try the link/properties it says that the link is an html element and not a css...

    Thank you

    Binding is done in HTML, not CSS (with the exception of a link to a background picture)

    So, if your navigation is a list, you should have the following in your HTML code:

    Here, in the example above, I use the

  • How to add the external css file to the _edge.js file

    I tried to add in the html page, but when I save the edge project it deletes.

    I'm able to add the external js file in scripts: [] in the _edge.js file

    We can add inside resources: []?

    And is it possible to add an external css in files of edge except in page html and javascript?

    CSS:

    Please put this in scene/creationComplete (file name change to your file name and path)

    $(" ",{"rel":"stylesheet","type":"text/css","href":"css/finename.css"}).append ("#Sta ge»);"})

    Add! important in CSS file properties.

    js files should be loaded with the upload script Panel on the right side of your user interface.

  • Cisco ASA ruled out a specific ip address of the split tunneling

    Hello

    I need help with a question on the split Tunneling Configuration.

    I have need exclude split tunneling networks already configured a specific ip address.

    This is my setup:

    Split_Tunnel list standard access allowed 192.168.0.0 255.255.0.0
    Split_Tunnel list standard access allowed 10.0.0.0 255.0.0.0

    attributes of Group Policy GroupPolicy_Anyconnect_Access_Exception_1
    WINS server no
    Server DNS value xxxxx xxxxxxx
    VPN - connections 3
    VPN-idle-timeout 480
    VPN-session-timeout no
    client ssl-VPN-tunnel-Protocol
    value of group-lock Anyconnect_access
    Split-tunnel-policy tunnelspecified
    value of Split-tunnel-network-list Split_Tunnel
    field default value xxxxx
    Split-dns value telefonica wh.telefonica cic.wh.telefonica telefonica.corp t380.inet
    mailar.telefonica.Corp mailar.telefonica.com tefgad.com telefonicaglobalsolutions.com
    telefonicabusinesssolutions.com

    I need to exclude the split tunnel, IP 10.0.0.50, my question is, if I change the list access deny this IP, the supplementary tunnel will exclude the period of INVESTIGATION.

    example:

    Split_Tunnel list standard access deny 10.0.0.50 255.255.255.255

    Split_Tunnel list standard access allowed 192.168.0.0 255.255.0.0
    Split_Tunnel list standard access allowed 10.0.0.0 255.0.0.0

    BR,

    Fidel Gonzalez

    Hi Fidel,

    Yes, it should work; as in your example deny 10.0.0.50/32 sholud exclude the traffic in the tunnel.

    I tried in my lab, and in my case, access-list is:

    split_1 list standard access denied the host 10.2.2.250
    split_1 list standard access allowed 10.2.2.0 255.255.255.0

    And it worked he excluded the 10.2.2.250 host.

    The screen shot of the AnyConnect added:

    Concerning

    Véronique

  • How to add an e-mail address of a message in an address book selected?

    I didn't need "Personal address book": I imported my e-mail addresses of my Eudora address books. As it is, it is quite cumbersome to add this address to the address book I want. In Eudora, it was easy

    Well, the function "copy E-mail address" is almost as good, with the message and the address book in windows separated. Most wanted help.

  • How to add an e-mail address to my address book from an e-mail?

    Someone sends me an email and I don't have their email in my Thunderbird addressbook. Is it possible to enter their information in my address book without having to retype all in my address book. In other e-mail programs I used, all I had to do was click on the message and click on a menu item drop-down which would be simply copy all the contact information in a new address book entry. Is it possible to do this in Thunderbird?

    When you view a message in a tab or the message pane there is a star to the right of the address of the sender. If the star is filled with color the address is already in one of your address books. If the star is not filled, click on the star to add. Click on the star a second time to open the Edit dialog box to add more details about the contact.

    This isn't the same star which is located to the left of the message header when you view the Inbox.

  • How to add the external library in NDK?

    Hello!

    I have problems adding the libhuapi library.

    It is not available in the Add Library Wizard. And if the libhuapi.so file is added as an external lib newspapers of the device:

    Unknown symbol: hu_ECDSAWAPINoHashVerify

    Unknown symbol: hu_ECDSAWAPINoHashSign

    LDD: FATAL: could not resolve all symbols

    I thank very you much for any help.

    Best regards, SOAman

    Add this in your .pro file...

    LIBS +=-lhuapi

  • How to add the e-mail address of my wife in addition to mine.

    After migrating all my information e-mail to my e-mail account and e-mail account from my wife, from Outlook Express to the new Thunderbird (which I recently downloaded for my new PC), only my e-mail address appears. How can I go about establishing a new account e-mail address of my wife?

    You run the new account wizard. https://support.Mozilla.org/KB/automatic-account-configuration

  • How to add icon to the address book item? (copy the page www icon and put it to file)

    How to put an image in this area "Details"?

    Have you looked at the Bookmark Favicon changer extension?

    This extension should be what you're looking for.

    You only need to find an appropriate icon.

  • How to add an external monitor for Pavilion dv6000z

    I have an extra monitor and I have pluged it in. computer had a fit

    Hello

    Connect the external monitor to the laptop using a VGA or HDMI cable, and then press Fn + F4.

    It should toggle the display on the screen.

    If you press Fn + F4 once, then, it goes to the external screen

    If you press twice: she will display on both

    You can also adjust the settings by going to display settings. Here are some links to the steps:

    Setting up dual monitor is easy in Windows 7

    Setting up dual monitor

  • How to change AnyConnect VPN remote to complete the split tunnel tunnel?

    I couldn't find an answer through the config of the SAA in the Cisco documentation and using Google.  To activate the complete tunnel for the AnyConnect client group policy, I just need to change the policy of Tunneling split to all networks of tunnels and set list of network voice against zero, if I want someone who connects with the AnyConnect customer to guarantee mobility to use internet corp pipe?

    Who, more you will also need a NAT nat rule VPN pool meets the ASA outside interface (or if address / hen you normally use for dynamic NAT).

    There are a few good examples with illustrations in this document.

  • [Issue] How to add an address preferred to call?

    Hello. I'm a newbie telepresence engineer once I was a network engineer.

    I have a question on how to add an address preferred codec SX20.

    I need a way to be included in the list of Favorites or telephone of our codec address book list.

    Codecs play stand alone, and we have many more codecs on other countries.

    Thus, it is difficult to move there to set up one by one, I can't come on a business trip.

    Manual of the SX20 administrator, I searched, but he had all the information I wanted to discover.

    The only one I found was using the list of the directory phone, so we had to use the telephone TMS, VCS directory server or external.

    Howerver, we do not have these devices, which means that it is cannot be an answer to us.

    In addition, I know the way to call one by one and add to Favorites in the history list.

    but, those who are too many, I hope someone knows how to do the local directory or favorite list.

    I think the best way is making a telephone directory or the list of favorites on pc or other device and go copy in others. But how?

    Sorry for incomvience for reading, because no mother tounge. I wish your kindess.

    Quick search of the forums found this:

    https://supportforums.Cisco.com/message/3685664

  • How to add an email address to a group in the address book?

    When I look at the ad group, I don't see how to add an address to the group.

    Simply select the contact to add to the list and drag it to the folder from the list and it lay.
    Hard, double click on the folder in the list to open the editing box and type in the info.

Maybe you are looking for

  • IPhone 7 from the US to Europe

    HI. Can someone tell me witch model of Iphone 7 can I buy U.S. (no carrier) and be able to use it in Europe (countries)? Thank you.

  • bug in bookmarking tabs open in firefox 23.0.1

    Open more than 50 tabs in firefox. Try to bookmark open tabs by "bookmark all tabs". Then check the bookmarks firefox created. Some open tabs are missing from the Favorites list. I encountered this problem several times. my computer Info: win-xp-sp3,

  • Someone had a problem of speaker with Droid RAZR HD

    Hello everyone, I have the Droid Razr Max HD, and it's a great phone. My headphone speaker had really crackily and distroted about 1.5 months ago. It finally got really irritating I did a factory reset. This has not fixed the problem. I contacted the

  • Update problems Jelly Bean on Xperia S compresses

    I think that we need a new topic for the bugs and problems of update of Jelly Bean.

  • Need an item, ppt on Gaming on Windows 7.

    Hi all I do a session background on windows 7. I needed some documents on the game on Windows 7 where I want to talk about more information on enchanments on Directx technology. It is an Evengelism event. I tried to connect but it no no no demos and