I have a secondary Internet connection that currently goes like this.
ISP Router – – -> My Cisco 1721 – – -> Core Switch. All NAT’ing and filtering is done on this router.
I am now trying to create a site to site VPN to our sister company for a backup if our main link goes down. So now what I am trying to do is listed below.
ISP Router – – -> My Cisco 1721 – Cisco 1721 FastEthernet configured with public IP – – -> ASA 5510 external interface configured with Public IP – ASA 5510 inside interface configured with 192.168.6.0/24 address – – -> Core Switch.
I now want to do all NAT’ing and filtering off the ASA, which I can get to work. But when I go to access a node on one of our remote subnets it is dropped by the ASA due to the my default NAT entry that is used for devices to go out to the Internet on. I do have static routes setup for each subnet pointing it to my WAN router. My ASA can ping about to all subnets without a problem so it can “see” those networks.
What do I need to do to get it so the traffic is permitted to those subnets?
Thanks in advance for any advice.