Here's the description of my problem :

I've a VPN LAN-to-LAN between my company and a customer. My subnet is The tunnel works perfectly. But, I want to access to my customer network from an another network. The another network has this subnet : How to configure it ? The connection between my two networks are OK.

I've a Cisco ASA 5510



don't worry to be french, i'm italian.........

now, there are multiple ways to reach the goal; at least

1) static (pre-nat-interface-name,post-nat-interface-name) fake-addr real-addr links 2 addresses, one in each network, and perform a static 1:1 translation

2) anything coming from X and going to Y? well give it a global address so that you need 3 elements

2.1) an access-l defining the pertinent traffic 2.2) a global address to use for PAT 2.3) a link between them, as in NAT command

that ways allow (simply) you to translate one addr into another and vice-versa or multiple addresses to just one (second solution)

while the NAT (or PAT) addr belongs to the "right" (encapsulated) network you've reached the goal.

| improve this answer | |

it's a nonsense question without details.

suppose YOUR ASA defines traffic between your and customer networks (let's say represented by and and is NOT coming out from a VPN but is a local network.

you can't just send pkt from to because the source is not included into "encription domain".

so you can ask counterpart to ADD the new net into VPN (as you will do at your endpoint), or simply NAT some address from into

in case is coming from another VPN you can only use NAT, but not redefinition of encr-domain.

| improve this answer | |
  • Thank you for your response. Can you explain me how to configure the NAT rules ? PS : sorry for the poor details, I'm french my english is terrible – Julien Jan 28 '16 at 15:28
  • about english : don't worry, am' italian – switch Feb 2 '16 at 10:12

Not the answer you're looking for? Browse other questions tagged or ask your own question.