On Wed, 27 Apr 2011, Scott Voll wrote:
I have an ASA 5510 that I use for both the head end for Anyconnect clients
and Hub and Spoke IPSec tunnels for Lan to Lan.
beside the no Nat, ACL for interesting traffic, and "same-security-traffic
permit intra-interface" command is there anything else that needs to be
done, in order to have the Anyconnect client access the remote IPSec LAN?
Building a VPN policy for Anyconnect clients is pretty much the same as
building a VPN policy for legacy IPSEC clients.
You need to define your client address pool(s), tunnel group definitions,
pre-shared keys (unless you use certificates), tunnel parameters, etc.
jms
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
