Security - Configuring ASA Site to Site VPN with NAT Exemption

[@bosunoshin6874]

This is really helpful. Good job Rob

[@chancemanning8418]

Great Video! Just recently passed the CCNA exam, quick question though... is there a specific reason you use IKEv1 over IKEv2 in this demonstration? The CCNA did not seem to cover much with VPNs.

[@RobRikerTechChannel]

No particular reason. I've covered IKEv2 as well on here. Congrats on the CCNA!

[@chancemanning8418]

@@RobRikerTechChannel Thank you! and thank you for the quick reply, just subscribed!

[@alexmiranda2636]

That's great! Good job. I'm trying to figure out how to establish a VPN from my EVE-NG Cisco Asa to Google Cloud platform. DO you have any suggestion in regards how to port forward the traffic from outside (real internet) to ASA? Cheers

[@RobRikerTechChannel]

Other than a static NAT, no, I don't know. Not sure why you would, but you probably can justify it.

[@alexmiranda2636]

@@RobRikerTechChannel unfortunately the router don't have the NAT option. I'm going to buy another one and try it :) many thanks

[@fakirpoo]

How would you forward Anyconnect traffic from a client through a site to site VPN? In other words, an ASA firewall is used for both Anyconnect and IPsec VPN tunnel.

[@RobRikerTechChannel]

setup split tunneling and allow the L2L subnets out in your ST rule

[@blade8485]

This was perfect, thank you

[@carloscastillo9321]

Hello can you please help any idea is good , I have 2 ASA and 2 routers , the 2 routers are connected P2P using private line and routing protocol EIGRP, the ASA have the public IP for each side, can I do VPN as a backup between the 2 ASAs? , I know that Multicast is not allowed on VPNs, what do you suggest ? one side has the CUCM server and provide service to the other side. Thank you

[@RobRikerTechChannel]

I'm sure it is, may take some playing around to get it to work.