Chapter 11 Scenario: Easy VPN Hardware Client Configuration
Client Mode and Network Extension Mode
11-4
ASA 5505 Getting Started Guide
78-18003-02
Figure 11-2 Topology with ASA 5505 in Client Mode
When configured in Easy VPN Network Extension Mode, the ASA 5505 does not
hide the IP addresses of local hosts by substituting a public IP address. Therefore,
hosts on the other side of the VPN connection can communicate directly with
hosts on the local network.
When configuring NEM, the network behind the Easy VPN client should not
overlap your the network behind the Easy VPN server
Figure 11-3 shows a sample network topology with the ASA 5505 running in
Network Extension Mode.
Internet
153802
Easy VPN Server
ISP router
192.168.100.4
192.168.100.3
192.168.200.3
Addresses not visible
from central LAN
Address not visible
from remote LAN
Remote LAN Central LAN
ASA 5505
(Easy VPN
Hardware Client)
To Next Page
Loading...
