topic NAT ASA interface for access through VPN in Network Security

NAT ASA interface for access through VPN

sulloas16 — Tue, 12 Mar 2019 06:01:16 GMT

Hi all!

I have this scenario below:

*serverx* --- *ASA1* ----------VPN L2L-------------- *ASA2* ------- *sw1*

10.10.0.1 20.20.20.1 20.20.20.2

VPN interesting traffic is 10.10.0.1/32 and 192.168.10.0/24.

sw1 is traslated to 192.168.10.2 and serverx can ping it.

The problem is when I try to translate ASA2 IP 20.20.20.1 to 192.168.10.1, serverx cannot ping it.

Working NAT config:

access-list NAT_MONITORING_1 extended permit ip host 20.20.20.2 host 10.10.0.1

static (admin,outside) 192.168.10.2 access-list NAT_MONITORING_1

Do you have any idea why this same configuration does not work for ASA interface IP?

Thanks in advanced!

Hi,Have you checked the

Vibhor Amrodia — Sat, 30 May 2015 07:33:43 GMT

Hi,

Have you checked the crypto map configuration and made all the necessary changes for the NAT statement.

Thanks and Regards,

Vibhor Amrodia

Hi! Yes I've checked crypto

sulloas16 — Mon, 01 Jun 2015 20:48:36 GMT

Hi!

Yes I've checked crypto map configuration and NATs.

I'm actually trying a different scenario to accomplish this...to nat ASA interface IP address on remote ASA (ASA1) and I saw that traffic goes into the tunnel from server but does not come back in the tunnel from ASA2.

I am wondering, does the ASA have a limitation to include its own interfaces IP addresses into a VPN tunnel?