Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Build new VPN group or can I NAT existing

Posted on 2011-02-20
1
Medium Priority
?
534 Views
Last Modified: 2012-05-11
I have a scenario and need help on direction:

I have a 5510 8.2(2) with 6 L2L (Hub and Spoke) VPNs working.
Road warriors connect to Hub (5510) with IPsec (SplitTunnel) and are working great. They are able to access all internal networks.

New reqirement is to connect 2 warriors to an RDP session on a server Via the internet. (new vendor will only allow RDP sessions from our IP)

1. I am thinking I can NAT VPN traffic to this RDP session but how?

2. Do I build new IPsec policy just for these two warriors, and not make it a split tunnel? Then I have to set up all new ACLs and NAT exempt rules, uugghhhh

Thanks in Advance

 
0
Comment
Question by:ldutchman
1 Comment
 
LVL 79

Accepted Solution

by:
lrmoore earned 1000 total points
ID: 34942461
You can do it as "internet on a stick" for the vpn users.
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805734ae.shtml
You can create a new policy just for these two warriors so the changes won't affect eveyone.
 You can also take the example config a step further and create policy nat rule that only works with that RDP session.
0

Featured Post

Prepare for an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program curriculum features two internationally recognized certifications from the EC-Council at no additional time or cost.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question