ASA5510 + Sonicwall site-to-site VPN not working

[Guest]

Perfect, thanks for the update.

[Guest]

one last question, if i want 192.168.123.0/24 only able to access 192.168.1.100 and 192.168.1.101.will this do the trick?access-list inside line 5 extended permit ip 192.168.123.0 255.255.255.0 object-group DM_INLINE_NETWORK_4   access-list inside line 5 extended permit ip 192.168.123.0 255.255.255.0 host 192.168.1.100  access-list inside line 5 extended permit ip 192.168.123.0 255.255.255.0 host 192.168.1.101access-list inside line 6 extended deny ip 192.168.123.0 255.255.255.0 any

[Guest]

No, the inside ACL is for traffic initiated from the inside LAN 192.168.1.0/24 out. I would configure the following: access-list inside-out-acl permit ip 192.168.123.0 255.255.255.0 host 192.168.1.100access-list inside-out-acl permit ip 192.168.123.0 255.255.255.0 host  192.168.1.101access-list inside-out-acl deny ip 192.168.123.0 255.255.255.0 anyaccess-list inside-out-acl permit ip any anyaccess-group inside-out-acl out interface inside

[Guest]

thank you. much appreciate it.