|
Posted by Laurent on March 21, 2008, 9:27 am
If you were Registered and logged in, you could reply and use other advanced thread options
Hello..
I need some help in configuring source nat for vpn clients connecting to
our pix.
I'd like to source nat them to the address of the inside interface, so
they could go anywhere in other lans connected to ours.
I remove them from nat 0 list and did this below, but it seems not working :
(vpn clients are in local ip pool 172.25.0.1 to 172.25.0.15)
>pdm location 172.25.0.0 255.255.255.240 outside
>access-list NATCLIVPN permit ip 172.25.0.0 255.255.255.240 any
>nat (outside) 50 access-list NATCLIVPN
>global (inside) 50 interface
Also, I can't find any example of this kind of configuration..
thank you by advance :)
|