08-31-2010 10:37 AM
Hello,
I'm looking into moving VPN Lan to Lan tunnel configuration from Cisco 3000 VPN concentrator to ASA 5510. I noticed that this particular configuration has NAT enabled in the concentrator (Config => Policy Management => Traffic Mgmt => NAT => L to L Rules)... there are 2 servers NATted to 192.168.1.1 and .2 addresses, so I need to do the same in ASA. What steps should I take to achieve the same config in ASA? Can this be done thru SDM?
thank you,
forman
Solved! Go to Solution.
08-31-2010 12:30 PM
In ASDM => configuration => NAT Rules, I can create static rule from Inside interface to Inside int, and then create the tunnel using "translated address" or "translated network" as Local network in VPN config. Is it correct?
That is correct.
You should NAT the traffic of the VPN and define the VPN traffic from the translated addresses.
Federico.
08-31-2010 10:38 AM
Hi,
I'm not sure if TAC has a tool that converts from VPN Concentrator to ASA.
I've always done them manually either via CLI or ASDM.
Federico.
08-31-2010 11:07 AM
Thanks Federico, but how would you define NAT statements for VPN tunnel in ASA? I can't find it in ASDM and don't have much experience to configure thru CLI. It seems that it was quite easy to do in the concentrator.
08-31-2010 12:01 PM
In ASDM => configuration => NAT Rules, I can create static rule from Inside interface to Inside int, and then create the tunnel using "translated address" or "translated network" as Local network in VPN config. Is it correct?
08-31-2010 10:41 AM
This might be helpful :-
http://www.cisco.com/en/US/docs/security/asa/asa72/vpn3000_upgrade/upgrade/guide/migrate.html
Thanks
Manish
08-31-2010 12:30 PM
In ASDM => configuration => NAT Rules, I can create static rule from Inside interface to Inside int, and then create the tunnel using "translated address" or "translated network" as Local network in VPN config. Is it correct?
That is correct.
You should NAT the traffic of the VPN and define the VPN traffic from the translated addresses.
Federico.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide