Sites B and C do not have connectivity, nor do they need to.
Because Sites B and C have overlapping subnets I am attempting to NAT the entire inside network of Site C via a nat pool and route-map.
We are overloading for internet connectivity at each site.
The tunnel between Sites A and C becomes active only when initiated from Site C (where I am nat'ing the entire inside subnet). I can ping and telnet from Site C to Site A successfully.
However, I cannot ping or telnet from Site A to Site C even after the tunnel is established.
I am using a NAT pool with 'match-host' and route-map in Site C. I can see the nat translation table in Site C shows the proper nat's but only when initiated from Site C. The nat table is blank when initiating the traffic from Site A.
What am I missing?
Any help is GREATLY appreciated. I've been banging my head against this for the better part of a week. I think I have the configuration correct according to what I've read online.
The ACL's and NO-NAT entries seem to be correct considering I do have connectivity from one side. This seems like a NAT issue whereas the NAT is never created unless the traffic is initiated from Site C where the NAT is configured.
Please let me know if you need additional information or config's.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...