Avatar of denver218
denver218
Flag for United States of America asked on

site-to-site VPN, interesting traffic on one side are public IP's

I have configured may site-to-site VPN's in the past, but the interesting traffic on both sides has all been IP's in the private IP range.  A vendor we host software with needs a VPN to my office.  The interesting traffic on my side are private IP's (192.168.2.3, 192.168.2.4), but the interesting traffic on their side is a public IP (1.1.1.1).  I've never configured a site-to-site VPN where the interesting traffic on one side is a public IP address.  Is this configured the same as a VPN where both sides interesting traffic is private addresses?  What would the nonat look like with the destination being a public IP?  Any assistance would be greatly appreciated.  Thanks.
CiscoVPNInternet Protocol Security

Avatar of undefined
Last Comment
denver218

8/22/2022 - Mon
Rob Williams

Is it actualy 1.1.1.1 ?  If so I am doubtful it is a true public IP but rather some device on the network with a sample configuration.  Perhaps something like a rougue router, or a printer, but the printer is actaully being used via the USB connecion rather than the Ethernet.

Can you locate a MAC address associated with it using arp -a ?  If so you can look up the manufacture of the NIC.  That sometimes helps if it is sometjing like a Linksys router.
http://standards.ieee.org/develop/regauth/oui/public.html
denver218

ASKER
You wouldn't expect me to post the actual public address would you:)  1.1.1.1 is just a reference to a public address.  Its not the actual address.
denver218

ASKER
BTW, both sides of the VPN are Cisco ASA's.  I forgot to mention that in the question
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Rob Williams

No problem, you posted LAN IP's so I wonderd, lots of people do post the public IP (unfortunately) thus why I asked "Is it actualy 1.1.1.1".
denver218

ASKER
For this VPN, my interesting traffic are two private IP's (192.168.2.3, 192.168.2.4), the destination IP is a public IP Address.  I just need to know if the VPN is configured the same way.
Sandeep Gupta

actually this is possible but you have to do natting,

on public IP side you have to mapp your private IPs
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER CERTIFIED SOLUTION
Marius Gunnerud

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
denver218

ASKER
Thanks.  It was configured the exact same way.