Destination NAT on VPN3000?

[shijogeorge]

Hi,

Does VPN 3000 Concentrator support destination NAT??

Thanks in advance for your help.

Regards,

Shijo George.

[jackko]

according to concentrator doc,

A NAT rule defines the criteria that a packet must meet to be translated. For interface NAT rules, criteria include the protocol: portless, UDP, or TCP.

For LAN-to-LAN connections, the criteria are the source, translated and destination IP addresses.

so destination nat supports lan-lan vpn only. to configure, go configuration > policy management > traffic management > nat

[shijogeorge]

Hi Jackko,

Thanks for your answer.

"For LAN-to-LAN connections, the criteria are the source, translated and destination IP addresses". I believe what is talked about here is the criteria for source NAT.

What I want to achive is an outside/destination NAT like what the following command does in PIX

static (outside,inside) x.x.x.0 y.y.y.0 netmask 255.255.255.0

Is this supported in VPN3000?

[jackko]

please excuse me for misunderstanding your original post.

i don't think that's supported, or i should say i don't know how.