IPsec VPN client on ASA/ASAv (eve-ng)

Before posting something, READ the changelog, WATCH the videos, howto and provide following:
Your install is: Bare metal, ESXi, what CPU model, RAM, HD, what EVE version you have, output of the uname -a and any other info that might help us faster.

Moderator: mike

Post Reply
casper34
Posts: 4
Joined: Thu Mar 23, 2017 5:56 pm

IPsec VPN client on ASA/ASAv (eve-ng)

Post by casper34 » Fri Mar 31, 2017 10:41 am

Hi all,
Anyone here labbing successful with IPsec VPN Client on asa/asav in EVE-NG?
I configured VPN successful but I unable access INSIDE/DMS Servers from Remote VPN. But with the same configure, on real physical ASA 5512, I can access INSIDE/DMZ resource from remote VPN.
Thanks,

ecze
Posts: 533
Joined: Wed Mar 15, 2017 1:54 pm

Re: IPsec VPN client on ASA/ASAv (eve-ng)

Post by ecze » Fri Mar 31, 2017 12:20 pm

Please post your topology...( screenshot )
E.

casper34
Posts: 4
Joined: Thu Mar 23, 2017 5:56 pm

Re: IPsec VPN client on ASA/ASAv (eve-ng)

Post by casper34 » Fri Mar 31, 2017 3:25 pm

Thanks E,
This is my Topology:
Topology.PNG
This is VPN Connection Info:
VPN-connect.PNG
And this is access to DMZ SERVER result:
access-dmz-server.PNG
Please help me troubleshoot, see link below for configure detail:

https://justpaste.it/151r5

Regards,
You do not have the required permissions to view the files attached to this post.

ecze
Posts: 533
Joined: Wed Mar 15, 2017 1:54 pm

Re: IPsec VPN client on ASA/ASAv (eve-ng)

Post by ecze » Fri Mar 31, 2017 4:16 pm

Like always,

First check connectivity ( is ASAV Public interface reachable by the VPN client Host ? )
If yes -> Check SA Policies
If Not -> Check Routing in the path from VPN Client to ASA
Check Esxi vswitch used for interface used by EVE ( promiscious enabled )

E.

Uldis (UD)
Posts: 5068
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: IPsec VPN client on ASA/ASAv (eve-ng)

Post by Uldis (UD) » Fri Mar 31, 2017 4:29 pm

This scenario I did may times, confirming IT is working, Any ASA ported or ASAv
All works

Post Reply