source nat in pix 506 for vpn clients

Mar 21, 2008 0 Replies

Hello..



I need some help in configuring source nat for vpn clients connecting to our pix. I'd like to source nat them to the address of the inside interface, so they could go anywhere in other lans connected to ours.



I remove them from nat 0 list and did this below, but it seems not working :



(vpn clients are in local ip pool 172.25.0.1 to 172.25.0.15)



pdm location 172.25.0.0 255.255.255.240 outside >access-list NATCLIVPN permit ip 172.25.0.0 255.255.255.240 any >nat (outside) 50 access-list NATCLIVPN >global (inside) 50 interface


Also, I can't find any example of this kind of configuration..


thank you by advance :)

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required