IP NAT on VPN Firewall

[mohammedrafiq]

Hi,

We need to terminate customer site-to-site VPN into our Cisco 5500 ASA. Customer IP range overlaps with our IP ranges, so need NAT. 

Can we NAT IP on same ASA which we terminating Site-to-site VPN or do we need another layer3 device before the firewall to perform NAT?

Regards,

[Michael Muenz]

Try this one:

http://www.ifconfig.it/wordpress/2015/08/cisco-asa-vpn-with-over-overlapping-addresses-and-twice-nat/