How to route traffic destined to a web server on remote VPN side.

[seamus.cranley]

Basically we want traffic from clients on the Internet to go through a static NAT on an ASA and sent through a VPN to a web server at a remote datacenter. 

I have tried several different NATs and configurations but none of them seem to be working.

The ones I tried are below.

http://www.alfredtong.com/cisco/cisco-asa-8-3-nat-within-a-site-to-site-vpn-tunnel/

http://packetpushers.net/cisco-asa-8-38-4-hairpinning-nat-configuration/

My question is should one of these be working, am I just configuring it wrong?

Thanks,

Seamus

[Karsten Iwen]

There are many things to consider to make it work with NAT. But for sure it can work.

But there is a better solution that is more easy to configure and also more secure:

Just place a reverse-proxy (for example nginx on a linux-box) in a DMZ at the main location and this proxy connects to the remote webserver.