topic Re: VPNs on ASA going to same destination networks using NAT in Network Security https://community.cisco.com/t5/network-security/vpns-on-asa-going-to-same-destination-networks-using-nat/m-p/806387#M973069 <HTML><HEAD></HEAD><BODY><P>I don't think it is possible. The problem is that you would need to NAT between the ASA and the remote endpoints before it hits the box, because the order of operation from outside to inside is IPSec first, then NAT.</P><P></P><P>At least in PIX and IOS this would be impossible, but I am not so familiar with the ASA so I could be wrong.</P><P></P><P>If the remote networks were overlapping it would not be any problem though.</P></BODY></HTML> Tue, 17 Jul 2007 12:20:57 GMT mattiaseriksson 2007-07-17T12:20:57Z VPNs on ASA going to same destination networks using NAT https://community.cisco.com/t5/network-security/vpns-on-asa-going-to-same-destination-networks-using-nat/m-p/806386#M973068 <P>I haven't been able to get into the lab to test this yet but was wondering if someone here had a quick answer.</P><P>The situation is a customer needs to use an ASA device to set up two L2L vpns. The problem is that at each remote end they have an overlapping address that the ASA side needs to connect to. It's not possible for the remote sides to either NAT this address or change it. I know I can set up outside to inside NAT in this situation, but I've never tried it with two overlapping addresses on the remote end. Or if someone else has a better solution, please let me know.</P><P>If you need more clarification, please let me know.</P><P></P><P>Thanks....</P><P></P> Mon, 11 Mar 2019 10:45:36 GMT https://community.cisco.com/t5/network-security/vpns-on-asa-going-to-same-destination-networks-using-nat/m-p/806386#M973068 srue 2019-03-11T10:45:36Z Re: VPNs on ASA going to same destination networks using NAT https://community.cisco.com/t5/network-security/vpns-on-asa-going-to-same-destination-networks-using-nat/m-p/806387#M973069 <HTML><HEAD></HEAD><BODY><P>I don't think it is possible. The problem is that you would need to NAT between the ASA and the remote endpoints before it hits the box, because the order of operation from outside to inside is IPSec first, then NAT.</P><P></P><P>At least in PIX and IOS this would be impossible, but I am not so familiar with the ASA so I could be wrong.</P><P></P><P>If the remote networks were overlapping it would not be any problem though.</P></BODY></HTML> Tue, 17 Jul 2007 12:20:57 GMT https://community.cisco.com/t5/network-security/vpns-on-asa-going-to-same-destination-networks-using-nat/m-p/806387#M973069 mattiaseriksson 2007-07-17T12:20:57Z