Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

PIX site to site VPN NAT question

Posted on 2007-03-29
1
Medium Priority
?
289 Views
Last Modified: 2010-04-09
When trying to set up a new site to site VPN on our Cisco PIX 506E
a basically copied the settings of the current vpn.

all the setting i copied and changed then added to the config worked except this one...

the origional settings were...

nat (inside) 0 access-list inside_outbound_nat0_acl
nat (inside) 1 0.0.0.0 0.0.0.0 0 0

so i copied the first bit to represent the new access-list i had created.
and then added this...

nat (inside) 2 access-list inside_outbound_nat1_acl

it added without problem in the CLI but in the PDM it came up with this causing an error.

Can someone tell me whats wrong?

Thanks
0
Comment
Question by:chouckham
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 10

Accepted Solution

by:
Sorenson earned 2000 total points
ID: 18815514
nat (inside) 0 specifies an access-list that skips that outbound NAT application.
The access-list tied to it should specify the VPN partners ip subnets, etc.  You will need to add the lines to the inside_outbound_nat0_acl, to specify your inside addresses and the new sites inside ip addresses.

specifying any other number after the nat (inside) matches it to a specific "global" command that sets the external nat address(s) to be used.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question