Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

good one ASA vpn concentrator conversion

customer has vpn concentrator hanging off ASA dmz interface. Customer wants vpn tunnels moved to ASA. Hitch, the ASA has a static toward the dmz converting a 10 address to a 172 address before hitting concentrator so end point of tunnel refers to 172 address not 10 address. If I do the following should it work?

nat (inside) 99 access-list convert

global (outside) 99 172.x.x.x

access-list convert permit ip host 10.x.x.x host 1.1.1.1 (other end of the tunnel)

thx

1 REPLY
Silver

Re: good one ASA vpn concentrator conversion

Here is the URL for the Migrating to ASA for VPN 3000 Concentrator Series Administrators. Follow the configuration guide. It may help you

http://www.cisco.com/en/US/docs/security/asa/asa70/vpn3000_upgrade/upgrade/guide/miGetStart.html

127
Views
0
Helpful
1
Replies