Hi,
One more question. Is it possible to make changes in configuration on WIFI-VPN and WIFI_NONVPN router?
If yes, then there is a solution:
Option A:
As today, All NATing for your 10.0.1.x and 10.0.2.x NATing is happing by both routers. If possible then remove the NATing from the Both Routers and let's handle by the Cisco ASA. If this condition you can access NAS using the actual IP address.
Following changes required:
Changes on NONVPN router:
Remove NATing
<Need configuration Help, Share your existing configuration>
Changes on the VPN router:
As complete traffic is moving over the VPN then you must bypass 10.0.1.x subnet from the VPN ACL.
Remove NATing
<Need configuration Help, Share your existing configuration>
Changes on ASA router:
As you have allowed the traffic between two different
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
and Add Static routes for both subnets.
Option B:
Changes on the VPN router:
As complete traffic is moving over the VPN then you must bypass 10.0.1.x subnet from the VPN ACL.
Also, you need to allow traffic from WAN to LAN access on the NAS IP address (One to One NATing)
Here WAN IP will be "192.168.6.6 and NAS IP as mentioned "10.0.2.111"
As example: ip nat source static 10.0.2.111 192.168.6.6
<Need configuration Help, Share your existing configuration>
Changes on ASA router:
As you have allowed the traffic between two different
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
Option 3:
Seems not recommended but you can configure GRE tunnel between NON-VPN and VPN router. other changes seem as
Regards,
Deepak Kumar
Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!
