It can. You need allow same interface traffic and configure nat outside. Sent from handheld.
On Sep 7, 2009, at 9:31 AM, "Garry" <[email protected]> wrote: > Alan Buxey wrote: >> Hi, >> >>>> What am I missing here? >> >> your ASA cannot be that IP - so is probably just dropping >> those packets as invalid... what you need to do is set up a >> proxy (eq squid) on your internal network that has an address >> within the 'allowed IP range' and then configure the ASA to >> use that proxy - your mobile clients can then use that > > So, say, I wouldn't have split tunneling - the ASA IOS isn't able to > let > VPN clients get through to the Internet by doing a PAT or NAT on the > way > out? > > > -gg > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
