NAT of whole subnet

Derelict

@johnpoz:

And just route the traffic to your asa via a transit.
Your ASA would see the 10.0.0.x address of your client directly..

Yes, I have to agree that is a better approach and it even worked! Thanks again!

Thanks for letting us know.

johnpoz

Glad to hear, but really there was never a question that it was a better approach and would work ;)

Natting has always been a workaround/hack to networks that overlap or napt when you need to have many IPs share the use of single ip. This work around sometimes is useful in rfc1918 space a quick and dirty way to get something done.

But in general if there is no absolute reason to nat, then you shouldn't.. If its rfc1918 to rfc1918 and you control both sides then not the way to do it.. And transit networks you would think were some new concept or something. I don't really understand the almost daily posts where they come up, the most common being asymmetrical routing issues because they didn't use a transit.