source nat in pix 506 for vpn clients

Hello..

I need some help in configuring source nat for vpn clients connecting to our pix. I'd like to source nat them to the address of the inside interface, so they could go anywhere in other lans connected to ours.

I remove them from nat 0 list and did this below, but it seems not working :

(vpn clients are in local ip pool 172.25.0.1 to 172.25.0.15)

pdm location 172.25.0.0 255.255.255.240 outside >access-list NATCLIVPN permit ip 172.25.0.0 255.255.255.240 any >nat (outside) 50 access-list NATCLIVPN >global (inside) 50 interface

Also, I can't find any example of this kind of configuration..

thank you by advance :)

Reply to
Laurent
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.