IPSec VPN Tunnel between RG750G and ASA5520

RouterOS General
1

Hi,

I have test VPN tunnel site to site tunnel:

LAN=>RG750G-Internet-ASA5520<=LAN

LAN IP: 1.1.1.1 ping to LAN IP: 2.2.2.2

Equipment:
1 site is Mikrotik RG750G
1 site is Cisco ASA5520

The result is:

**** VPN tunnel is up

Only Private IP cannot ping over VPN tunnel.

Regards,

2

Maybe this video will help:

http://gregsowell.com/?p=1290

3

Normally you don’t NAT the VPN traffic, but if you need to NAT you do the following:

access-list NAT permit ip host 10.10.1.25 REMOTE_LAN
static (inside,outside) 10.90.7.25 access-list NAT

access-list VPN permit ip host 10.90.7.24 REMOTE_LAN

The above configuration uses Policy NAT to translate the internal 10.10.1.25 to 10.90.7.25 when going to REMOTE_LAN

Federico.

4

I faced something similar with ASA 5520 at home. I have 4G on in my Android for connecting internet using Router VPN. The only thing I don’t get is swap connectivity maybe because of ports.