That´s already what I thought first, but it isn´t. The inside subnet mask is a Class B. The only thing what I suggest is, we have a VPN Client pool starting with 10.x.x.x and the concentrator take it as Class A Network.
There is no other solution. The subnet mask is chosen by the class of the subnet you use as it does by default with PPP. You can either use the class of subnet that would give you your required SNM or assign static addressess to the clients. If issued from the VPN concentrator you would have the same problem so they would have to be configured amanually on the remote host.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...