asa 5510 9版本 SSLVPN 无法连接到内网

李_者

asa 5510 9版本 SSLVPN 无法连接到内网   我下面贴配置 帮我看下我那里有问题！  能连接 连接后能通过VPN 上网 但是无法访问我内网


ip local pool sslpool 172.16.254.2-172.16.254.254 mask 255.255.255.0

object network obj-AnyconnectPool
subnet 172.16.254.0 255.255.255.0


object network obj-AnyconnectPool
nat (outside,outside) dynamic interface



后面是连续的配置
ssl encryption aes256-sha1 3des-sha1 des-sha1
webvpn
port 9999
enable outside
enable inside
anyconnect image disk0:/anyconnect-win-3.0.0629-k9.pkg 1
anyconnect enable
tunnel-group-list enable
smart-tunnel list smart.tunnel telnet telnet.exe platform windows
smart-tunnel list smart.tunnel remotedesktop mstsc.exe platform windows
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
webvpn
  smart-tunnel enable smart.tunnel
group-policy clientgroup internal
group-policy clientgroup attributes
vpn-tunnel-protocol ssl-client ssl-clientless

tunnel-group sslgroup type remote-access
tunnel-group sslgroup general-attributes
address-pool sslpool
default-group-policy clientgroup
tunnel-group sslgroup webvpn-attributes
group-alias sslgroup_users enable

李_者

用内网连接成功 获取到地址池地址 能访问内网  如果用外网连接成功获取到地址池 能上外网但是不能访问内网