Dynamic IP Nat Pool with 3030 <--> 3002 Tunnel

[j.ruff]

I currently use the 3002 HW Client at several ROBO/SOHO locations in Network Extension mode. This works great. Recently I have the need to establish the same type of connection, but I need to provide a dynamic IP NAT pool for the clients behind the 3002. Is a configuration like this possible using the 3030 & 3002, or will I need some other HW to replace the 3002. If other HW is needed please suggest low end options (i.e. I realize a L2L with another concentrator will work). And I asume the configuration is possible with a 1720(?).

Thanks in advance,

John

[awaheed]

Hi Ruff,

Any configuration which pertains to a Site to Site scenario cannot have the 3002 as a solution in there. In such a situation your best bet would be a low end router (800 series/1700 series) or a PIX 501.

Hope this helps,

Regards,

Aamir

-=-=-

[ajagadee]

Hi,

If I understand you correctly, you want to NAT the ip addresses behind the VPN3002 to specific ip address when they go accross the IPSec tunnel to the VPN Server, so that the source ip address is different when the packet reaches the VPN Server.

This is not possible with the VPN3002 and you can try using PAT but this is only for many to one translation and also if you have a VOIP solution or a speficic reason for using NEM, then PAT will not work for you.

Regards,

Arul