asa vpn and pat

[daysleeper76]

Hi to all,

i have a simple question, is possible to configure an asa for a site to site vpn and to configure pat for internet connectivity at the same time?

[jj27]

Yes.

You can use the outside interface IP address for multiple things.

[jeremyault]

Yes but keep in mind that you need to be specify an ACL for the tunnel traffic so internet-bound traffic won't go through it and becuase you'll likely have a PAT configuration that overlaps with the tunnel traffic, you'll also need to create a "nat 0" for the tunnel traffic if that's what you need.

Hope that makes sense.