Upgrade from ASA 5505 to ASA 5506-X

intcomser
intcomser used Ask the Experts™
on
Hello -

We are attempting to upgrade from an ASA 5505 to an ASA 5506-X.  We are jumping from 8.2 to 9.4 as well so some of the configuration needs to be tweaked.  We have everything working except for one site to site VPN and some NAT statements for a couple of webservers.  I'm sure I'm missing something simple on both fronts but I can't spot it.  I have attached the old config and the new config for review.   Any help is greatly appreciated!
Old-Running-Config.txt
New-Running-Config.txt
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Hi,
NAT statements have changed since 8.3 release. NAT exempt as well, which you need for ipsec tunnels.
You may want to read the following article, it should make your day

https://www.experts-exchange.com/articles/11175/Cisco-ASA-PRE-8-3-and-POST-8-3-NAT-Operations.html

hope this helps
max
i believe it woud solve

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial