Natting with ipsec tunnel on PIX 515e

[network_a]

I am using IPsec VPN tunnel. its site to site. I want to know how to do natting in this scenario.

[hackworth.kenny]

Easiest way is to build your VPN tunnel as you normally would. The only additional bit you would need is to "nat 0" your crypto ACL. This will cause the PIX to not perform any static translations prior to sending the traffic over the VPN tunnel.

I believe this is what you are asking. If not, please supply more details.

[matheisj1]

I have the same question I am not sure how to do a nat 0 on a pix or cisco period. Say if I want to nat 10.172.38.176/28 to my lan of 192.168.99.0/24 how would I do that exactly.

Thanks

and it is across a tunnel also.

[network_a]

I have /29 subnet network and one public IP so need to do PAT. But in Case of VPN esp will not allow it. If u have any solution please reply.

[spremkumar]

Hi

You can refer the below link for necessary config which can fit onto your setup..

http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html

regds

[network_a]

Do u have any specific resolution for PAT with IPsec VPN tunnel while using esp.