NAT happens *before* IPSEC. --- On Thu, 1/3/13, Samol <[email protected]> wrote:
> From: Samol <[email protected]> > Subject: [c-nsp] IPsec VPN and Static NAT > To: "[email protected]" <[email protected]> > Date: Thursday, January 3, 2013, 8:55 PM > Hi All, > > I have topology like: > > LAN_A----->(RouterA)<------------>(ASA)<-----LAN_B > > Our requirements are : > > 1. IPsec VPN between the two sides > 2. LAN_A goes to LAN_B will go thru VPN > 3. On ASA, we want to have a Fake IP address(mapped IP eg. > 192.168.55.0) > that will map to LAN_B ( Traffic from LAN_A) > > I have configured all of that, but when i get VPN worked, > and i put Static > NAT on ASA to do the IP mapping, VPN doesn't work anymore. > I'm wondering > how ASA process the NAT and VPN interesting traffic. which > one will ASA > look first? example, when packet from LAN_B arrives on ASA, > will it look at > static NAT and then push that the translated IP address into > VPN ? this > confused me :( > > Please help! > > Regards, > Sam > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
