网络设备配置实训教程教学课件作者谢尧王明昊课件教学资源local-lan-pix-asa课件.pdf

PIX/ASA 7.x: Allow Local LAN Access for VPN Clients Configuration Example Document ID: 70847 Introduction Prerequisites Requirements Components Used Network Diagram Related Products Conventions Background Information Configure Local LAN Access for VPN Clients Configure the ASA via the ASDM Configure the ASA via CLI Configure the VPN Client Verify Connect with the VPN Client View the VPN Client Log Test Local LAN Access with Ping Troubleshoot Unable to Print or Browse by Name NetPro Discussion Forums ? Featured Conversations Related Information Introduction This document provides step?by?step instructions on how to allow Cisco VPN Clients to only access their local LAN while tunneled into a Cisco ASA 5500 Series Security Appliance or PIX 500 Series Security Appliance. This configuration allows VPN Clients secure access to corporate resources via IPsec and still gives the client the ability to carry out activities like printing wherever the client is located. If it is permitted, traffic destined for the Internet is still tunneled to the ASA or PIX. Note: This is not a configuration for split tunneling, where the client has unencrypted access to the Internet while connected to the ASA or PIX. Refer to PIX/ASA 7.x: Allow Split Tunneling for VPN Clients on the ASA Configuration Example for information on how to configure split tunneling on the ASA or PIX. Prerequisites Requirements This document assumes that a working remote access VPN configuration already exists on the ASA or PIX. Refer to the PIX/ASA 7.x as a Remote VPN Server using ASDM Configuration Example if one is not already configured. Cisco ? PIX/ASA 7.x: Allow Local LAN Access for VPN Clients Configuration Example Components Used The information in this document is based on these software and hardware versions: Cisco ASA 5500 Series Security Appliance version 7.2? Cisco VPN Client version 4.0.5? The information in this document was crea