Destination NAT with Cisco PIX LAN-to-LAN VPN
Posted on 2009-02-19
We have a site-to-site VPN tunnel between our own Cisco PIX 515E (7.2) and a 3rd party's ASA 5505.
The IP addressing at the 3rd party end clashes with ip addressing on our own network, so we'd like to perform NAT on a network address we're able to route and translate this to their ip addressing, whilst passing the traffic across the vpn tunnel. I.e. we send packets to 192.168.1.x and they're translated to destination 10.0.0.x and pass across the tunnel.
We have two internal interfaces which we'll need perform the NAT across (we'll call them 'inside' and 'dmz' for the sake of this question).
Before I post or describe the config of the PIX, is this possible with a VPN and, if so, can someone describe the NAT configuration that would do what we need?