Cisco ASA 5505 Getting Started Manual page 158

Client Mode and Network Extension Mode
Figure 11-2 Topology with ASA 5505 in Client Mode
192.168.100.3
192.168.100.4
ASA 5505 Getting Started Guide
11-4
Remote LAN
ISP router
ASA 5505
(Easy VPN
Hardware Client)
Addresses not visible
from central LAN
When configured in Easy VPN Network Extension Mode, the ASA 5505 does not
hide the IP addresses of local hosts by substituting a public IP address. Therefore,
hosts on the other side of the VPN connection can communicate directly with
hosts on the local network.
When configuring NEM, the network behind the Easy VPN client should not
overlap your the network behind the Easy VPN server
Figure 11-3 shows a sample network topology with the ASA 5505 running in
Network Extension Mode.
Chapter 11 Scenario: Easy VPN Hardware Client Configuration
Internet
Easy VPN Server
Address not visible
from remote LAN
Central LAN
192.168.200.3
78-18003-02