I have a topology where the inside and outside IPs on my ASA are privately addressed, but this ASA also manages my public IP space as well.

Internet---router---ASA----Inside Network.

The network between router and ASA is private. My inside network is private. The Router routes all of my public IP space to the ASA. I could do NAT on the router to translate a public IP to the outside interface of the ASA.

Is there a way that the ASA can be configured to statically NAT a public IP address to the private inside or outside interfaces to support RA and L2L VPNs? Any sample configs or tricks necessary to do that? Thanks.