Re: VPN NAT issue

["Lord Sporkton" <lordsporkton () gmail com>]

You want a NAT exemption on the IN2 interface
so like
nat (IN2) 0 access-list no-nat

where no-nat defines traffic from IN2 -> VPN_POOL

Lawrence


2008/11/12 Vladislav Antolik <vladislav.antolik () gmail com>:
> Hello,
>
> I'm using Cisco PIX 515E with 8.0(3) image.
> I have 3 networks.
> IN 172.16.0.0/16
> IN2 173.16.0.0/16
> OUT 174.16.0.0/16.
> VPN local pool is 10.0.0.0/28.
> I'm using remote access VPN to reach IN servers without problems(I
> used howto from Cisco pix conf. guide)
>
> I would like to reach IN2 servers too, but I don't know to setup NAT
> from vpn pool to this network(IN2).
> I this network (IN2) my VPN hosts(10.0.0.0/28) must be translated.
>
> I tried
> nat (OUT) 66 10.0.0.0 255.255.255.240
> global (IN2) 66 173.16.0.5
> but this doesn't work.
>
> Is any possibility to translate VPN pool?
>
> Many thanks
> Vladislav
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () listserv icsalabs com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards



-- 
-Lawrence
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards