10-18-2008 09:56 AM - edited 03-03-2019 11:59 PM
While configuring easy vpn in nem mode with asa 5510 and a 1800 SERIES router,it has been said that intersting traffic should not be natted.How does this traffic goes to the internet with private ip addressing if the 2 sites are link by internet ?
What is this access list role?
access-group OUT in interface outside
example: See file attached
Solved! Go to Solution.
10-19-2008 05:53 AM
Hello Kouferidji,
the scenario could describe the need to avoid to NAT traffic that has to go trough the IPSec tunnel:
LAN to LAN traffic has to travel inside ipsec packets and don't need to be natted
when accessing internet it has to be natted as you observe
access-list no-nat extended permit ip 10.10.10.0 255.255.255.0 192.168.10.0 255.255.255.0
net 192.168.10.0 is the lan behind the 871 see the drawing
Hope to help
Giuseppe
10-19-2008 05:53 AM
Hello Kouferidji,
the scenario could describe the need to avoid to NAT traffic that has to go trough the IPSec tunnel:
LAN to LAN traffic has to travel inside ipsec packets and don't need to be natted
when accessing internet it has to be natted as you observe
access-list no-nat extended permit ip 10.10.10.0 255.255.255.0 192.168.10.0 255.255.255.0
net 192.168.10.0 is the lan behind the 871 see the drawing
Hope to help
Giuseppe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide