Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Site to Site VPN behind NAT

Posted on 2010-09-08
2
Medium Priority
?
1,120 Views
Last Modified: 2012-05-10
I need to setup a site to site VPN between two location, one of the locations has my VPN appliance and ASA 5505 NAT-ed behind the ISP router

ISP----NAT-Router-----ASA5505----LAN

The NAT is a one to many NAT.
The Site to Site VPN will be an IPSEC vpn.

My questions is can i setup the point to point in these conditions? i'm pretty sure i will need to setup some port address translations if it can work, the question is which ports will i need?

Thanks
0
Comment
Question by:curwengroup
2 Comments
 
LVL 9

Accepted Solution

by:
Donboo earned 2000 total points
ID: 33631255
Yes it can be done like that.

You need to PAT/NAT port udp 500 and 4500 and your Remote VPN concentrator must be setup for NAT-T VPN connections.
0
 
LVL 2

Expert Comment

by:slotb007
ID: 33660659
Exactly what Donboo said.

With NAT you need to enable NAT-T (Nat traversal).
Traffic is send over UDP port 500/4500.
IPSec can then travel over NAT...
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've had to do a bit of research to setup my VPN connection so that Clients can access Windows Server 2008 network shares.  I have a Cisco ASA 5510 firewall.  I found an article which was extremely useful: It had a solution if you use ASDM to config…
When you connect to your workplace's VPN, you may not notice that you are using your workplace's servers to serve up webpages.  This might be undesirable since the workplace can log all the places you've been.  It also might be very slow to load pag…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question