pix nat question

Nov 23, 2005 2 Replies
pix nat question open original image

need to nat inside machines which are in a tunnel cfg, on outside (public int), to a different private block. i.e. other side of tunnel sees new block addresses.


In article , lfnetworking wrote: :need to nat inside machines which are in a tunnel cfg, on outside :(public int), to a different private block. i.e. other side of tunnel :sees new block addresses.

formatting link
shows the steps for the case where your internal networks overlap with the other network. If the other side does -not- overlap with you, you can just leave out some parts of what I showed there.

i just need to map my inside block to a new private block, so if i understand correctly, i just need to.

static(inside,outside) newprvtnet mask existingprvtblocknet mask

access-list vpn_acl permit ip newprvtnet mask vpnpeernet mask

and add, newprvtnet mask, to the nat 0 acl

??

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required