PIX to VPN Concentrator tunnel, can I NAT traffic before the tunnel?

[thomasdzubin]

I have a PIX-to-VPNConcentrator IPSEC tunnel.

I have a local host on my PIX inside interface with IP 192.168.5.5 but the site on the VPNConcentrator end of the tunnel wants to see IP 192.168.77.9 (because they're using the 192.168.5.x network at their end for some other use)

I know how to NAT stuff going from inside to outside, but I've never NAT-ed tunnel traffic before.

Can I NAT a local inside IP address BEFORE the traffic hits the tunnel?

[ajagadee · Accepted solution]

Yes, this is possible. Please refer the below URL for configuration details:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800949f1.shtml

Regards,

Arul