can I NAT only VPN tunnel traffic

[osimonov1]

Hello All,

I have a HQ with few hosts (10.1.1.x) which need to communicate to Remote office's hosts via VPN tunnel and servers via normal routing. Due to some limitation, we need HQ hosts to appear as from 20.1.1.x network for the RO which can be done easily by NATting. However, due to the same limitation, once HQ host need to reach a server outside, an original 10.1.1.x address should appear. Can I configure NAT to be used for VPN tunnels only on ASA (5512)?

Thanks

[Marius Gunnerud]

You need to configure policy NAT for the VPN traffic.  The NAT commands vary depending on which version ASA you are running. 

This link provides a good example between pre 8.3 and post 8.3 NAT configurations.

https://supportforums.cisco.com/docs/DOC-9129

Let me know if you require any further clarification.

--
Please remember to rate and select a correct answer