Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Nat and VPN

Is there a way to nat a vpn tunnel in the same way you would an interface?

nat (real_ifc).....

3 REPLIES
New Member

Re: Nat and VPN

would you like to NAT incoming traffic from the VPN to the outside interface or the inside interface ?

To the outside interface will not work i think...

to the inside i guess you have to specify a

global (inside) 2 ip.ra.ng.e m.a.s.k

and modify the "NONAT" line to "NAT 2"

New Member

Re: Nat and VPN

The traffic is coming from an tunnel connected to the outside interface. Then I need to translate that so that it can reach its destination on the inside network

New Member

Re: Nat and VPN

so you want the users on the other lan (vpn users) to be able to connect to resources on the corporate lan (vpn destination)

Seems to me this is not a nat issue, but routing.

If the 2 pixes connect to eachother via the vpn, the routing table is altered so the 2 LAN's can communicate. If no ACL is applied on the inside interface of both pixes, the communication should be fine.

Be sure to use 2 different ip-segments for both LAN's otherwise routing is not possible (the pix will think the segment is local, and will not send it across the vpn)

Set the pix as the default gateway on both lan's and communication between the 2 LAN's should be possible.

167
Views
0
Helpful
3
Replies