Double NAT issues with S2S VPN

[Terence Payet]

Hi guys,

Am having a problem with one of our S2S setup.

We currently have an ASA 5545X and we are currently establishing a tunnel with a remote company. We do not have control over their equipment, but problem is on our side. 

They want to access one of our host 10.10.10.10 which is currently being NAT to a public 41.x.x.10, from their office on network 192.168.10.0/24 (see diagram for more details). What we want to do is NAT the public ip 41.x.x.10 again on the ASA to another ip, let's say 172.10.10.10 going towards the remote office and vice versa NAT there incoming ip 192.168.10.10 to 173.10.10.10.

So basically we want to do source and destination NAT on the ASA.

I have attached my config as well.

Many thanks in advance.

Steve

[rizwanr74]

Hello Terence,
 

I understand that host: 10.10.10.10 is being natted to public 41.x.x.10.  Now please answer me, whether the natting is taking place on your ASA-HQ, or the R1 router ?

How does R1 and ASA-HQ is connected via a WAN cloud (via inside ASA)  or through another s2s tunnel between R1 and ASA-HQ?

thanks