Hello, we have quite simple setup.
(LAN1) - (ASA1) - (IPsec Tunnel) - (ASA2) - (LAN2)
We have AnyConnect clients on ASA1. That clients should have access to LAN1 and LAN2.
Recently we upgraded our ASAs to 9.7(4) version to get Tunnel interfaces.
With crypto maps it worked pretty well, but after moving to Tunnel interfaces AnyConnect clients can't get to LAN2 anymore. They still have connection to LAN1 though.
LAN2 is accessible from LAN1 without any problems.
ASA2 has route to AnyConnect clients network through Tunnel interface.
When I shutdown Tunnel interfaces and create crypto maps back that it works.
What could be the problem?
