Cisco ASA 5505 NAT VPN
Posted on 2009-12-29
I create a VPN tunnel (via wizard) to access a server on our client, and the tunnel was up OK:
show crypto isakmp sa
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: XXXXXXXX
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
show crypto ipsec sa
#pkts encaps: 119, #pkts encrypt: 119, #pkts digest: 119
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
The client give me a ip range (192.168.221.0/24) to access your network.
How can I create a NAT rule to enter the network on client with a client IP (like 192.168.221.1)?