IPSec Traversal to Pix from Router with Multiple Internet Connections
We currently have a router that has multiple internet connections terminating to our firewall. We are using NAT for connections out to the Internet, and that is working fine. What we want to do is be able to allow vpn connections to come from an address in our second internet connection's ip address range. The firewall has it's outside interface in the same subnet as our first internet connection, which works fine. When I configure the NAT statement on the outside router, the firewall accepts connections from the second internet connection's ip address, but not from the original ip address we have been using.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...