Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

nat VPN traffic

I have a customer with the following situation.

We use nat (inside)1 0 0 for outside translation.

We use nat (inside) 0 access-list for the VPN.

due to customer's requirements I need to nat the VPN to an IP address.

Can I do this without giving up the standard access translation to the outside world?

2 REPLIES
New Member

Re: nat VPN traffic

Sure, you can create a 'nat (inside) 2 access-list xxx' for all traffic with the remote network at the VPN endpoint and use global (outside) 2 to assign a translation address.

New Member

Re: nat VPN traffic

I couldn't get the nat (inside) 2 to accept an access-list variable. As far as I know you can only use the access-list variable on a nat (int) 0 statement.

221
Views
0
Helpful
2
Replies