ASA to Cisco ISR VPN

[nelson-rick]

I am having a problem with my VPN tunnel from ASA to ISR.  I just want to assign one ip on my Cisco ISR side to 192.168.96.48 and allow it to only access 192.168.96.101 & 192.168.96.102 on the ASA side.  I also need this tunnel to be bidirectional.

Any assistance would be greatly appreciated.

This is what I tried but no luck.

route-map nonat permit 10
match ip address 134

access-list 134 permit ip  host 192.168.1.244 host 192.168.96.101

access-list 134 permit ip host  192.168.1.244 host 192.168.96.102
ip nat pool ah_pool 192.168.96.48 192.168.96.48 netmask 255.255.255.252
ip nat inside source route-map nonat  pool ah_pool overload

ip nat inside source static 192.168.1.244 192.168.96.101 route-map nonat

ip nat inside source static 192.168.1.245 192.168.96.102 route-map nonat

[ghostinthenet]

Can you post the relevant ISAKMP, IPSec, crypto map and tunnel group settings (feel free to scrub actual addresses and keys) from your ASA? It's a lot easier if we work backwards from what you have.

[nelson-rick]

Sorry for the confusion but I have to create a tunnel with one of my servers (192.168.1.?) using 192.168.96.48 connecting over VPN to 192.168.96.101 & 102. 

In the ASA this is simple but I am not sure how to do this on the ISR.  I don't control the ASA.