NAT originated traffic from inside to passthrough an IPsec VPN

[wael.hedhli]

Hi,

I need to contact a remote LDAP server via the inside interface.this remote LDAP server is reachable via an IPsec tunnel and due to network overlapping we are natting source addresses before they passthrough the VPN.

Is it possible to nat the inside interface address to make the remote server accessible?

I have created a dynamic source NAT rule, but that did not work.

Any idea ?

EDIT : i have attached a network diagram to give you guys a clear vision about the issue

as described in the diagram , the ASA is trying to reach the LDAP server (192.168.2.100) using the inside interface (192.168.66.1) passing through an IPSec which require a Source NAT to 192.168.5.0/24 because of the address overlapping.

the nat is working fine for all the LAN subnets exepct for the inside.

Thanks

[balaji.bandi]

Can you provide more information with the config to understand the issue.

[Marvin Rhoads]

I don't think you can force the ASA to originate traffic from the Inside interface, NAT it and then put it into the tunnel to reach the LDAP server at the other end.

Could you possibly use the the ASA management interface? Then you can have a management-only route for the traffic to send it out via the inside interface (either directly or indirectly).