Resolution
To configure inbound NAT on the Cisco VPN 3000 Concentrator, perform these steps:
- Log in to the Concentrator through HTTP or HTTPS.
- Go to Configuration > Policy Management > Traffic Management > NAT > Enable.
- Select LAN-LAN NAT Rules. Click Apply.
- Go to Configuration > Policy Management > Traffic Management > NAT > LAN-LAN NAT Rules.
- Click Add.
- Select Static. Configure the source address, translated address and the destination address with correct relevant wildcard masks.
- Click Add.
Note: The source address is the remote address.The destination address is the local address behind the Concentrator. The translated address is the one into which the remote address should be translated.
For example, the remote network is 1.1.1.0 255.255.255.0. If the network behind the Concentrator is 2.2.2.0 255.255.255.0, and you want the remote network to be visible as 3.3.3.0 255.255.255.0, it would look like this:
Source : 1.1.1.0
Wildcard Mask : 0.0.0.255
Translated : 3.3.3.0
Wildcard Mask : 0.0.0.255
Destination : 2.2.2.0
Wildcard Mask : 0.0.0.255
For additional information, refer to the Configuration | Policy Management | Traffic Management | NAT section of Policy Management.
