convert 8.3x remote access nat to 8.2 version

[lcaruso]

Hi,

I've been working in 8.3 for all of my remote access vpn configs. Can someone help me correctly convert this to 8.2 version?

Here is my 8.3 version (I've omitted what I believe does not require conversion, correct me if I'm wrong)

object network inside-network
 subnet 192.168.2.0 255.255.255.0
object network user-vpn 
 subnet 10.10.222.0 255.255.255.0

object network admin-vpn 
 subnet 10.10.223.0 255.255.255.0
access-list split_tunnel extended permit ip object inside-network object admin-vpn log 
access-list split_tunnel extended permit ip object inside-network object user-vpn log 
nat (inside,outside) source static inside-network inside-network destination static admin-vpn admin-vpn
nat (inside,outside) source static inside-network inside-network destination static user-vpn user-vpn

The 8.2 ASA currently has this for nat

nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0

[Jennifer Halim · Accepted solution]

The conversion should be as follows:

access-list inside_nat0_outbound permit ip 192.168.2.0 255.255.255.0 10.10.223.0 255.255.255.0

access-list inside_nat0_outbound permit ip 192.168.2.0 255.255.255.0 10.10.222.0 255.255.255.0

nat (inside) 0 access-list inside_nat0_outbound

Hope that helps.

[Jennifer Halim · Accepted solution]

And the split tunnel will be as follows:

access-list split_tunnel standard permit 192.168.2.0 255.255.255.0

[lcaruso]

thank you very much!