I need some help. I am trying to setup out new ASA 5510, and I am stuck. Everything looks to work with my internal and DMZ interface, but I am having a problem with trying to contect out to one of our clients sites via VPN. We use Cisco VPN to connect to on of our client sites, and the client is configured as IPSEC over UDP. I have tried the ISAKMP nat-transversal 3600 with no luck. I started by following the steps in the getting started guide to get NAT and the DMZ setup. Also I am going to have my web server in the DMZ talk to a SQL server on the inside that I havn't setup yet, and I am going to have a smtp smart-host in the DMZ that will send to my internal Exchange. So if I am completly off base on my NAT config for internal and DMZ please let me know.l
I have posted a sanitized copy of my config. There is not much in it yet as I am trying to make sure everything functions before opening up to our internal resources. Also I plan on implenting VPN on the ASA in the future, but I havn't gotten that far, so hopefully the fix won't prevent that. Any help will be apprieciated.