The ENTERPRISE_PRIVATE-TRAFFIC access-group is important to allow the IP traffic through the firewall from remote subnets to the inside subnets. Route inside 172.16.0.0 255.255.128.0 172.16.254.253 1Īccess-list BRANCH01_TRAFFIC extended permit tcp object CAMPUS_NETWORK object BRANCH01_NETWORKĪccess-list BRANCH01_TRAFFIC extended permit icmp object CAMPUS_NETWORK object BRANCH01_NETWORKĪccess-list ENTERPRISE_PRIVATE-TRAFFIC extended permit tcp object PRIVATE_NETWORK object PRIVATE_NETWORKĪccess-list ENTERPRISE_PRIVATE-TRAFFIC extended permit icmp object BRANCH_NETWORK object CAMPUS_NETWORKĪccess-group ENTERPRISE_PRIVATE-TRAFFIC out interface insideĬrypto ipsec ikev1 transform-set L2L esp-aes esp-sha-hmacĬrypto map BRANCH1 1 match address BRANCH01_TRAFFICĬrypto map BRANCH1 1 set peer 134.95.56.18Ĭrypto map BRANCH1 1 set security-association lifetime seconds 86400Ĭrypto map BRANCH1 1 set ikev1 transform-set L2L Update : Corrected error in " crypto ipsec ikev1" command interface Vlan1 Campus network - ASA 5505 IPSEC VPN headend device configuration.
0 kommentar(er)
