cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
476
Views
0
Helpful
3
Replies

convert 8.3x remote access nat to 8.2 version

lcaruso
Frequent Contributor
Frequent Contributor

Hi,

I've been working in 8.3 for all of my remote access vpn configs. Can someone help me correctly convert this to 8.2 version?

Here is my 8.3 version (I've omitted what I believe does not require conversion, correct me if I'm wrong)

object network inside-network
subnet 192.168.2.0 255.255.255.0

object network user-vpn
subnet 10.10.222.0 255.255.255.0


object network admin-vpn
subnet 10.10.223.0 255.255.255.0

access-list split_tunnel extended permit ip object inside-network object admin-vpn log
access-list split_tunnel extended permit ip object inside-network object user-vpn log

nat (inside,outside) source static inside-network inside-network destination static admin-vpn admin-vpn
nat (inside,outside) source static inside-network inside-network destination static user-vpn user-vpn

The 8.2 ASA currently has this for nat

nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0
2 Accepted Solutions

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

The conversion should be as follows:

access-list inside_nat0_outbound permit ip 192.168.2.0 255.255.255.0 10.10.223.0 255.255.255.0

access-list inside_nat0_outbound permit ip 192.168.2.0 255.255.255.0 10.10.222.0 255.255.255.0

nat (inside) 0 access-list inside_nat0_outbound

Hope that helps.

View solution in original post

And the split tunnel will be as follows:

access-list split_tunnel standard permit 192.168.2.0 255.255.255.0

View solution in original post

3 Replies 3

Jennifer Halim
Cisco Employee
Cisco Employee

The conversion should be as follows:

access-list inside_nat0_outbound permit ip 192.168.2.0 255.255.255.0 10.10.223.0 255.255.255.0

access-list inside_nat0_outbound permit ip 192.168.2.0 255.255.255.0 10.10.222.0 255.255.255.0

nat (inside) 0 access-list inside_nat0_outbound

Hope that helps.

And the split tunnel will be as follows:

access-list split_tunnel standard permit 192.168.2.0 255.255.255.0

lcaruso
Frequent Contributor
Frequent Contributor

thank you very much!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: