Site to Site VPN Same Network

ancarr · ‎09-17-2009

I have an ASA5520 running 8.0.4. I need to create a tunnel with a vendor using the same internal network as we are. They are unable NAT on their side. I would like both sides to be able to bring up the tunnel. They are using 10.2.x.x/16 as their internal network, as are we. The interesting traffic on my side would come from the nodes 10.0.194.1 and 10.0.194.5. How do I configure my side of the tunnel to get this to work?

Thanks,

Keith

Collin Clark · ‎09-17-2009

I don't think you'll ever be able to have both sides bring the tunnel up because of the NAT'd address space. Here;s is a config guide on configuring VPN with NAT (only 1 side can initiate).

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9950.shtml

Hope it helps.