I would like to get some help on IPSec Passthrough on an ASA 5520, with version 8.3, and ASDM 6.3. Currently I have a requirement for users in my internal network (10.10.249.128 / 25) to be able to connect to external IPSec VPN servers.
So I created a network object with 10.10.249.128 / 25, and used dynamic PAT to translate the source ip address to the external internet facing outside interface:
I then added the following rules on the inside-in ACL:
However troubleshooting shows that isakmp is passing through the firewall, but esp and ah is not.
Seems like the nat rule is drawing my ESP traffic, can any one point me in the correct direction?