Cisco ASA Crypto Maps and NAT Rules for Site to Site VPN with Network Objects
Posted on 2014-04-25
I have a site to site VPN with necessary Crypto Maps and Before NAT rules. I have no control over my affiliates ASA but would like to make some changes on my end.
Have Crypto Maps and NAT rules for the following hosts on the other end.
These 3 hosts talk to many of the subnets and hosts on my end. I would like to group those 3 hosts into a network object group and redo my NAT and Crypto Maps to reference the new group. This would really cut down the length of my Crypto Map and Nat lists.
If I create the object group on my end, will my affiliate need to create the same group on his end as well as redo his NAT and Crypto Maps to match mine? Or will we be OK being that there would still be NAT and Crypto Maps to mach each individual host on his end?
Running 8.4.1 on my ASA.