DMVPN | HUB Router Sits at HQ in the DMZ behind ASA

[Ibrahim Jamil]

Hi Overseas Freinds

Talking DMVPN

HUB Router Sits at HQ in the DMZ behind ASA ,The HUB will NAT a Public IP ,  Question is how the NAT / ACL looks like

Thanks 

[MHM Cisco World]

Why NATing need for DMVPN?

Can you more elaborate 

[Ibrahim Jamil]

Hi Freind

the Hub router has private ip in the DMZ segment , so we will be Nated over ASA Using public IP to be reachable to spokes over INET

can u suggest good design y met in real production

Thanks