NAT on ASA or Router with private WAN IPs

Unanswered Question
Jul 28th, 2009
User Badges:



I have this setup



192.168.1.X-----L2SWITCH-----(192.168.1.1)ASA140---------ROUTERWAN1(10.254.1.1)------ p2p serial-----(10.254.1.2)ROUTERWAN2-----ASA140----192.168.2.X


Now there is an NMS server and other users behind site 1 which needs to be accessed from site 2, I wanna know that if no public wan IP is given from the WAN serial link provider then which IP should I use on the link between ASA outside and router interface.

Is there a need to do NAT if there is no Internet connectivty involved?. If yes where should i use NAT on the ASA or the router.


Thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Collin Clark Tue, 07/28/2009 - 05:19
User Badges:
  • Purple, 4500 points or more

You would not need to use NAT. You can if you want or your security policy dictates it though. From site 1 to site 2 you would use real IP's to access resources.


Hope that helps.

syedraheel Tue, 07/28/2009 - 06:31
User Badges:

Thanks collin, btw If for any reason I do need to NAT then I would do it on the router rite?

Collin Clark Tue, 07/28/2009 - 06:58
User Badges:
  • Purple, 4500 points or more

Really doesn't matter where you do it. I like NAT on an ASA better, so I personally would do it there, but it's up to you.

Actions

This Discussion