Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

3005 to 3005 NAT

I need to set up a P-2-P tunnel between a business client and my company. We attempted this today, we got past phase 2 but could not pass traffic. Here is they way I need to have it configured.

3005 A) NAT/PAT We need to appear as one address. I created a LAN-LAN NAT rule as follows:

PAT

10.0.0.0 Source 172.30.1.1 Trans 172.17.1.0Remote

0.0.255.255 0.0.0.0 0.0.255.255

With this we should be NAT/PAT our entire 10.0.0.0 range into one address correct?

3005 B)

They are using 10.0.0.0 as well. One to One NAT needs to be enabled. Here is the setup on the 3005 B:

Static

10.0.0.0 Source 172.17.1.0 Tras 172.30.1.1 Remote

0.0.255.55 0.0.255.255 0.0.0.0

With all that configured I am still unable to pass traffic. We do not have any rules in place that would prevent traffic yet. Any suggestions?

Thanks

Anthony

1 REPLY
Bronze

Re: 3005 to 3005 NAT

You could refer to the document Configuring the Cisco VPN 3000 Concentrator in a Site-to-Site IPSec VPN with Overlapping Private Networks on Cisco.com at http://www.cisco.com/warp/public/471/config_vpn_3k_site.html. Hope that helps

115
Views
0
Helpful
1
Replies