Hi,

I have small office that is connected to the main office over a ipsec tunnel.

On the main office lan I have a server that only accept traffic from the main office inside lan.

Therefor I need to NAT incoming traffic from the ipsec tunnel with a new source address (a address from main office inside).

The ipsec tunnel is up and working.

How should the NAT look like?

I have tried with the "ip nat outside source "command, but it did not work completely (the traffic was NATed but when the response come the traffic was not sent back in to the tunnel.

Regards Niklas