OpenForum RSS: site to site vpn asa 5505 routing problem

site to site vpn asa 5505 routing problem (diezzz)

Thu, 17 Feb 2011 07:30:37 GMT

thnx BJ). ��, � �� .

site to site vpn asa 5505 routing problem (diezzz)

Thu, 17 Feb 2011 06:33:30 GMT

Src: 192.168.239.0/24
Dst: 10.1.150.0/24
Srv: Any
Gw: 0.0.0.0
Int: X3

site to site vpn asa 5505 routing problem (BJ)

Thu, 17 Feb 2011 06:22:50 GMT

�� sonicwall. �� Σ� �� 10.1.150.0/24?

>[�� ]
> 192.168.239.250 �� 10.1.150.1 �� asa 5505 �� arp ��:
> arp-in: request at inside from 172.20.20.1 0006.b127.3317 for 10.1.150.1 0000.0000.0000
> arp-set: added arp inside 172.20.20.1 0006.b127.3317 and updating NPs at 34794710
> arp-in: request at inside from 172.20.20.1 0006.b127.3317 for 10.1.150.1 0000.0000.0000
> arp-set: added arp inside 172.20.20.1 0006.b127.3317 and updating NPs at 34794750
> arp-in: request at inside from 172.20.20.1 0006.b127.3317 for 10.1.150.1 0000.0000.0000
> arp-set: added arp inside 172.20.20.1 0006.b127.3317 and updating NPs at 34794800
> �� .
> �.� �� asa 5505 �� , �� 10.1.150.0
> �� capture:

site to site vpn asa 5505 routing problem (diezzz)

Thu, 17 Feb 2011 06:19:27 GMT

�� , �� 10.1.150.0/24 �� 172.20.20.0/24, � �� 192.168.239.0.24

site to site vpn asa 5505 routing problem (ural_sm)

Thu, 17 Feb 2011 05:17:57 GMT

> �� .
> �� :
> ��
> ��?

�� 0 ��

�� .
NAT: 192.168.239.0/24 -> 172.20.20.1/24
��

��

access-list nonat extended permit ip 172.20.20.0 255.255.255.0 10.1.150.0 255.255.255.0
access-list nonat extended permit ip 192.168.239.0 255.255.255.0 10.1.150.0 255.255.255.0

access-list 110 extended permit ip 172.20.20.0 255.255.255.0 10.1.150.0 255.255.255.0
access-list 110 extended permit ip 192.168.239.0 255.255.255.0 10.1.150.0 255.255.255.0