Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Network Design question

I have 4 sites all currently connected together via cisco's IOS VPN. Each site is using public IP addresses internally. My question is, is it possible to use NAT on the inner networks at each location.

for example

site 1 subnet = 192.168.1.0

site 2 subnet = 192.168.2.0

site 3 subnet = 192.168.3.0

site 4 subnet = 192.168.4.0

VPN Clients = 192.168.10.0

I also have a DMZ channel at site 1 that must use public IP addresses (no NAT) due to the web and email servers.

To throw a kicker in it, each site contains Novell 5.x servers that must communicate between themselves. No outside connection is required to internal NAT lans except via the VPN Clients. Since the routers will be doing the NAT and VPNs I don't see why this solution should not work.

1 REPLY
Bronze

Re: VPN Network Design question

You can use NAT with VPN tunnels. The following is an example -

http://www.cisco.com/warp/customer/707/overload_private.shtml

And there are other examples at the following URL -

shttp://www.cisco.com/warp/customer/707/index.shtml

81
Views
0
Helpful
1
Replies