SOURCE NAT FOR SITE TO SITE VPN

[htaluja_2]

We have VPN between two sites. All traffic (priv. sub - priv.sub) is not natted. However, I want to be able to source nat all traffic destined for a specific server and port? Can this be done?

[Jon Marshall]

Hi

Yes, use policy NAT eg.

assuming tcp and you are translating the source IP addresses to 192.168.5.10

access-list pnat permit tcp any host "ip address" eq "tcp port"

nat (inside) 2 access-list pnat

global (outside) 2 192.168.5.10

Then what you need to do is update your crypto map access-lists to reference the natted address ie. 192.168.5.10 in addition to what they already reference. Obviously this needs updating at both ends.

HTH

Jon