Solved

Cisco ASA Tunnel

Posted on 2010-08-20
11
354 Views
Last Modified: 2012-06-21
Is it possible to use a Cisco ASA 5505 for the following:


172.18.112.0/18(inside)----> 10.1.1.1(outside)-->internet--->10.1.1.2(outside)---->172.18.112.0/18(inside)


We want to extend our current network to a new building for a seasonal warehouse, but I am wondering if I can have that same network over there or if I need a new network over there completely.

thanks!
0
Comment
Question by:dbs0026
  • 3
  • 3
  • 3
  • +1
11 Comments
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 33485476
No, it is impossible!

I advise to use individual subnets, or use on SITE A the first /19 address and use the second /19 address on  SITE B
0
 

Author Comment

by:dbs0026
ID: 33485814
So you can't even setup a site to site vpn and use it in Transparent mode?
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 33485849
No, you not able to use same subnet for local and remota address... If you want it I advise to use L2tpV3
0
 
LVL 17

Accepted Solution

by:
Kvistofta earned 500 total points
ID: 33486234
"impossible" Oh no!

You need to do  policyNAT of the traffic entering the vpn tunnel.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9950.shtml

/Kvistofta
0
 
LVL 17

Expert Comment

by:Kvistofta
ID: 33486251
Of course, it is not the same network. You cannot do "bridging", but you can connect two networks with the same addressins by doing address translation.

/Kvistofta
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:dbs0026
ID: 33486379
So by doing address translation, I can have 172.18.112.0/20 on both my LAN here in the office and on our LAN in the remote warehouse?

There will be a DSL connection for the "outside" interface to set the vpn tunnel up with.
0
 
LVL 17

Expert Comment

by:Kvistofta
ID: 33486388
Yes, but you need to "fool" the hosts on each side that the other sides ip adddresses are something else.
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 33486440
Do you have routers? Or only ASAs?
 how many the bandwith?
0
 

Author Comment

by:dbs0026
ID: 33486559
We only have asa's for this project, I am sure I could come up with some older 2600's though. If I need to put a different subnet on the remote end, I can. My goal was to keep it though the same and just have the Vpn tunnel in between. The traffic going between is minimal, symbol rf scanning guns for product shipping.
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 36960713
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Setting Port speed and duplex on Cisco 3560 switch 2 42
Cisco AnyConnect SBL and system software deployments 2 43
Access List 2 18
Help with ASA config smtp traffic 10 29
Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now