I have a router behind my ASA firewall that terminates VPN client connections. I want to allow the VPN connections to passthrough the ASA to the router at 172.16.1.2 on the inside interface of the ASA. I started by entering:
static (inside,outside) tcp interface 50 172.16.1.2 50
static (inside,outside) tcp interface 51 172.16.1.2 51
static (inside,outside) udp interface 500 172.16.1.2 500, however this one errors:
ERROR: unable to reserve port 500 for static PAT
ERROR: unable to download policy
What does this mean and how do I fix it? Is this even the right way to go about allowing the VPN traffic to pass through to the router and authenticate?
Thanks in advance.