cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
212
Views
0
Helpful
1
Replies

nat issue

kolawole1
Level 1
Level 1

While configuring easy vpn in nem mode with asa 5510 and a 1800 SERIES router,it has been said that intersting traffic should not be natted.How does this traffic goes to the internet with private ip addressing if the 2 sites are link by internet ?

example:

access-list no-nat extended permit ip 172.22.1.0 255.255.255.0 172.16.1.0 255.255.255.0

1 Accepted Solution

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

The traffic is tunneled so the private IP addressing is never seen on the Internet. So the source and destination IP addresses of the packets when they are the Internet are the outside interface of the ASA and the outside interface of the 1800.

The IP header with the source and destination private IP addresses ie. 172.22.1.x & 172.16.1.x are only visble once the outer IP header has been removed and it is the ASA and 1800 that remove and add the outer IP header.

Jon

View solution in original post

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

The traffic is tunneled so the private IP addressing is never seen on the Internet. So the source and destination IP addresses of the packets when they are the Internet are the outside interface of the ASA and the outside interface of the 1800.

The IP header with the source and destination private IP addresses ie. 172.22.1.x & 172.16.1.x are only visble once the outer IP header has been removed and it is the ASA and 1800 that remove and add the outer IP header.

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco