overlapping network via vpn

[jerry.mcrae]

i have a business partner who needs to vpn into our pix/network and they have a couple subnets that overlap with some of ours - how should this be handled?

thanks - Jerry

[srue]

either side can do this with policy NAT (or at least i know that your PIX can). Create a new IP range to NAT the overlapping subnets to (on one side or the other) and use the new IP range in the crypto acl.

It sounds you like you probably need " static policy nat ".

Here's the link for static policy nat for 7.2, the commands are the same for 6.3 as well.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1042553

[jerry.mcrae]

can you point me to a white paper or config example. i will research policy NAT in the mean time.

thanks - Jerry

[srue · Accepted solution]

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9950.shtml