I am confused as to how to apply NAT to the following scenario:
Internet----->ASA----->Internal Network
publicIP publicIP
VPNClient---->ASA----->ACL to resources
(publicip) (single NAT'd ip)
What I want to accomplish is have users VPN through the ASA box and use one IP address on the internal side of the ASA, therefore NAT must be applied on the inside and how? Is this possible?
I can get this to work without NAT enabled, that is users will grab an ip address from our internal DHCP server. What I want is the VPN tunnel to use a private ip, then all users NAT to a single public ip on our internal network. if this works then I will apply ACl's based on groups.
How do I accomplish this?
