Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Double Nat Site-to-Site VPN Pix

I need to double-nat a site-to-site VPN because both sites are using the same ip address range, can any one assist?

2 REPLIES
Hall of Fame Super Blue

Re: Double Nat Site-to-Site VPN Pix

Hi

Site 1 subnet 192.168.1.0

Site 2 subnet 192.168.1.0

Site 1 NAT subnet 172.16.5.0

Site 2 NAT subnet 172.16.6.0

Site 1

======

access-list pnat permit ip 192.168.1.0 255.255.255.0 172.16.6.0 255.255.255.0

nat (inside) 2 access-list pnat

global (outside) 2 172.16.5.0 255.255.255.0

Your crypto access-list will read

access-list vpntraffic permit ip 172.16.5.0 255.255.255.0 172.16.6.0 255.255.255.0

Site 2

======

access-list pnat permit ip 192.168.1.0 255.255.255.0 172.16.5.0 255.255.255.0

nat (inside) 2 access-list pnat

global (outside) 2 172.16.6.0 255.255.255.0

Your crypto access-list will read

access-list vpntraffic permit ip 172.16.6.0 255.255.255.0 172.16.5.0 255.255.255.0

HTH

Jon

New Member

Re: Double Nat Site-to-Site VPN Pix

Thank you Jon

814
Views
0
Helpful
2
Replies
CreatePlease to create content