topic Hide LAN behind 1 IP - VPN in Network Security

Hide LAN behind 1 IP - VPN

Locayta123 — Mon, 11 Mar 2019 22:38:18 GMT

HI there.

I've been asked to configure a VPN to a remote office location and to NAT my Office VLAN behind one fixed IP.

My office VLAN: 172.16.101.0/24

Assigned static IP: 172.16.101.250

Remote Office: 10.192.0.0/24

I am ok to configure the VPN and IPSEC rules but how do i configure the NAT so that my office lvan is hidden behind the 1 static IP when access the VPN?

Hide LAN behind 1 IP - VPN

Julio Carvajal — Tue, 06 Mar 2012 01:27:22 GMT

Hello Jamie,

You need to follow the following instructions or steps:

1-The Nat rule

access-list TEST permit ip 172.16.101.0 255.255.255.0 10.192.0.0 255.255.255.0

static (inside,outside) 172.16.101.250 access-list TEST

2- Change the crypto ACL on both sites

Now it should look like this on this ASA:

access-list VPN permit ip host 172.16.101.250 10.192.0.0 255.255.255.0

On the other side

access-list VPN permit ip 10.192.0.0 255.255.255.0 host 172.16.101.250

Regards,

Do rate all the helpful posts,

Julio.

Security TAC engineer

Hide LAN behind 1 IP - VPN

Locayta123 — Thu, 08 Mar 2012 11:26:19 GMT

access-list TEST permit ip 172.16.101.0 255.255.255.0 10.192.0.0 255.255.255.0

Is this section created within the access rules list?