Solved

Build new VPN group or can I NAT existing

Posted on 2011-02-20
1
513 Views
Last Modified: 2012-05-11
I have a scenario and need help on direction:

I have a 5510 8.2(2) with 6 L2L (Hub and Spoke) VPNs working.
Road warriors connect to Hub (5510) with IPsec (SplitTunnel) and are working great. They are able to access all internal networks.

New reqirement is to connect 2 warriors to an RDP session on a server Via the internet. (new vendor will only allow RDP sessions from our IP)

1. I am thinking I can NAT VPN traffic to this RDP session but how?

2. Do I build new IPsec policy just for these two warriors, and not make it a split tunnel? Then I have to set up all new ACLs and NAT exempt rules, uugghhhh

Thanks in Advance

 
0
Comment
Question by:ldutchman
1 Comment
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 34942461
You can do it as "internet on a stick" for the vpn users.
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805734ae.shtml
You can create a new policy just for these two warriors so the changes won't affect eveyone.
 You can also take the example config a step further and create policy nat rule that only works with that RDP session.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now