Quick NAT question on ASA

[Andy White]

Hi,

I am having to NAT an IP range on our ASA 5520 as a remote VPN has the same IP range.  The NAT is done, but for the source access list on our ASA do I need to use our natted IP range or the non-natted IP range?  I wasn't sure.

Thanks

[sangram palande]

I guess that really depends on IOS version you are using.

If you are using 8.3 you need to specify the real ip address in the accesslist.

Previously, 8.2 and before you needed to specify the translated addresses in the access list.

Hope this is useful.