I have a VPN tunnel between an ASA 5520 and a 5505.
The 5505 is at a customer site and the 5520 is ours. The customer would like to deploy some equipment at our site and they are very specific about what IP addresses they want to use. Problem is, we can not use that subnet for the tunnel. How can I set up NAT on the ASA's so that the customer would be able to see their devices on the IP's that they want?
For example, if they insist that one of their devices is 10.1.1.3 / 24 and their network (behind the 5505) is 10.2.1.1, they would be able to ping 10.1.1.3 from the 10.2.1.1 address. Yet the 10.2.1.1 address would be NAT'd as well as the 10.1.1.3 address?
I hope this is not too confusing.
Start Free Trial
