Hello,
Have a Cisco ASA5505. Client has 1 public IP. ASA handling WAN connection/routing for internal network. Client has two (2) Verizon Network Extenders. These setup an IPSec site-to-site tunnel between VZ and these devices. They are using ports 500 and 4500. The IPSec NATT traffic is being picked up by the ASA and dropped. ASA is taking it as a request to initiate a site to site VPN and not passing traffic along to internal VZ network extenders to allow them to create an assured UDP connection. A Buffalo router running DD-WRT with IPSec passthrough mode is working great, allowing both VZ network extenders to work. Client does not need IPSec or site to site VPN abilities, so this can be disabled in config to make this work. We know this can be setup very easily with port forwarding to an internal static IP - However - issue is that there are TWO of these extenders internally, so port forwarding will not work in this case (would only allow one extender to communicate). Other issue is that these extenders cannot be managed - we cannot log into them and set a static IP. They can be 'semi' static via DHCP/MAC settings to give consistent IP however if need be.
Looking for the proper config code to allow for this traffic to be passed through ASA device to the internal extenders to allow for proper communication.
The client has very limited needs, the config changes for these VZ extenders are really the highest priority for them, so we can modify/turn off anything necessary to make this work, existing config does not matter.
Thank you very much for any config examples and guidance you could provide.
