Route traffic comming inside the WAN to outside the WAN(Same interface)via IPSec tunnel

[Ravindu Jayalath]

This is our test setup. Any source will hit the ASA5505 Wan interface to a public IP lets say 194.79.112.3. We need to NAT this IP 194.79.112.3 to a local IP of the other side of the LAN (behind Linux firewall) lets say 172.17.100.2 (194.79.112.3 <==>172.17.100.2). How can we do that? Interesting traffic of the IPSec is trafficc generated between 192.168.0.0/16 and 172.17.100.0/24.

So simply what we need to do is when a user hits to the 194.79.112.3 the destination IP of the request should be changed to 172.17.100.2 and the source IP of the request shuold be changed to 192.168.0.0/16 range IP and request shuold be forwarded out of the WAN interface so that traffic will be intersting traffic of the IPSec and will go to the required destination via IPSec tunnel.

We need to know whether this is possible and any help from any one of you will be highly appreciated.

Thanks in advance.

[Marwan ALshawi]

i think you need to do nat hairpnning and also play with your interesting traffic of the VPN !!

see the bellow link might help you about the nat hairpnning in ASA

https://supportforums.cisco.com/message/1019512#1019512

good luck

if helpful Rate

[Ravindu Jayalath]

can you describe this more if possible please. Thanx.