topic Re: IPSEC b/w ASA and Router --- with nat stuff in Network Security https://community.cisco.com/t5/network-security/ipsec-b-w-asa-and-router-with-nat-stuff/m-p/983276#M419802 <HTML><HEAD></HEAD><BODY><P>In order to configure a LAN-to-LAN tunnel between a Cisco IOS? router and an Adaptive Security Appliance (ASA), these configurations are required on the ASA:</P><P>Configure the crypto ipsec command in Phase 2. </P><P>Configure the isakmp policy command. </P><P>Configure the nat 0 command and the access-list command in order to bypass NATting. </P><P>Configure the crypto-map command. </P><P>Configure the tunnel-group DefaultL2LGroup command with group information</P></BODY></HTML> Wed, 09 Apr 2008 14:30:29 GMT smalkeric 2008-04-09T14:30:29Z IPSEC b/w ASA and Router --- with nat stuff https://community.cisco.com/t5/network-security/ipsec-b-w-asa-and-router-with-nat-stuff/m-p/983275#M419800 <P>I need help regarding the following issue..</P><P></P><P>An asa is connected to a router which is connected to the internet. </P><P>A vpn must be established b/w ASA and a router that is over internet . The ASA is not directly connected to the internet. It is connected to a router which nat the Asa outside ip to a static global IP . </P><P></P><P>All i need to know is that do need any special configs for this . or its the same as if ASA would have been directly connected to the internet</P> Fri, 21 Feb 2020 09:57:54 GMT https://community.cisco.com/t5/network-security/ipsec-b-w-asa-and-router-with-nat-stuff/m-p/983275#M419800 Muhammad Zeeshan Sanaullah 2020-02-21T09:57:54Z Re: IPSEC b/w ASA and Router --- with nat stuff https://community.cisco.com/t5/network-security/ipsec-b-w-asa-and-router-with-nat-stuff/m-p/983276#M419802 <HTML><HEAD></HEAD><BODY><P>In order to configure a LAN-to-LAN tunnel between a Cisco IOS? router and an Adaptive Security Appliance (ASA), these configurations are required on the ASA:</P><P>Configure the crypto ipsec command in Phase 2. </P><P>Configure the isakmp policy command. </P><P>Configure the nat 0 command and the access-list command in order to bypass NATting. </P><P>Configure the crypto-map command. </P><P>Configure the tunnel-group DefaultL2LGroup command with group information</P></BODY></HTML> Wed, 09 Apr 2008 14:30:29 GMT https://community.cisco.com/t5/network-security/ipsec-b-w-asa-and-router-with-nat-stuff/m-p/983276#M419802 smalkeric 2008-04-09T14:30:29Z