Our company is trying to set up our laptops to use soft phones so that we can communicate when we aren’t at our desks. We have been able to set up conversations via our intranet and with one person outside VPNing in and the other person on the inside but are having trouble with setting up communications between two people that are attempting to establish a call when they are both using VPN to enter our network.
We are using an ASA as our VPN concentrator and through some research I have come to a limited understanding of something that might solve the problem but I need help with clarrification.
From what I understand I need to put in the command “same-security-traffic permit intra-interface” to allow traffic to go back out the same interface it came in.
Also, it looks as if I need to set up a policy to allow split tunneling. The thing is one document I saw said that the ACL for that policy needs to specify the inside network addresses and another said I needed to specify the VPN pool addresses.
Can anyone please help with confirmation of which is the correct method so I can get this working?
Thanks!
