Dear All,



I will highly appreciate any help in this regard, one of our branches 
connected through E1 circuit with IPSec tunnel is unable to use Internet
 from HQ, Below is the topology,







HQ - ASA 5510-------------E1------------------ Router - Branch  ---- LAN





ASA has interfaces, 



E0/0  = E1 connecting branch..

E0/1  = HQ LAN

E0/2  = Internet



Below is the NAT and the ACL for interesting traffic config on ASA



global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

nat (inside) 0 access-list 101



access-list 101 per ip 10.1.1.0 255.255.255.0 172.16.1.0 255.255.255.0



Everything is working fine except that users in the branch unable to 
access the Internet through HQ i don't think if the NAT configuration on
 ASA is correct in order for the branch users to be able to access the 
internet, and also I'm not doing any NAT on branch router.  Anyone with 
any help please...



Kind Regards,

                                          
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to