Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

Double NAT VPN Scenario


I have a situation where I need to setup a PPTP VPN tunnel through double-NAT. See the diagram for details. Note: The IP addresses used in the diagram are not the actual IP addresses used in the live network.


On the remote site I have a Tomato router setup with PPTP. This is setup behind a residential gateway and it recieves a dynamic public IP from the ISP.

At the main office we have an ASA 5505 (base model) with a static public IP assigned to the outside interface. The inside interface of the ASA is configured with a NAT'ed IP address and is connected to a Tomato router just like the one on the remote site. The Tomato router is setup with NAT on the inside interface(s), effectively turning this into a double-NAT scenario.

My question is how do I configure the ASA so that the two Tomato routers can have PPTP connectivity?



CreatePlease to create content