I have been tasked to setup a VPN tunnel with an external party's network, but I hit a bit of snag.
I am currently running a Cisco ASA 5510 with private subnets of
10.1.2.0/24 on the "inside" network.
The other site I wish to connect to has a private subnet of
As a result, there is a conflict on both private subnets, and I need to perform OUTSIDE NAT to NAT my ongoing host traffic of
192.168.1.0/24 (the other party has insisted I used this subnet).
The other party does not wish to make changes on their end, so everything has to be done on my firewall.
I have looked at some resources online:
It seems easy to effect this from configuration, however, I am already running several VPN tunnels at the moment for this network, and I am concerned the change to outbound NAT might affect my other tunnels or configurations.
For instance, I already have other remote sites of with subnets of
- How do I ensure that the outbound NAT will have no effect on my existing tunnels?
- Would having an outbound NAT with same subnet as one of my existing remote sites cause an issue?
- Can I 'tailor' a specific NAT behavior just for a particular VPN Tunnel (just for this specific other party), and will this resolve any potential conflict?
- I also have a specific set of ACLs that deal with the same subnet of
the outbound NAT of
192.168.1.X. Will there be issues?