NAT

msubtain · ‎11-15-2006

I am in the situation where i can not have more than 1 Static IP address on one of my branch offices, and the possible soution with available hardware is going to be look like this,

INTERNAL SWITCH(OFFICE LAN) 10.250.1.0/24

|

CISCO ASA 5510 (NAT/PAT/VPN)

|

CISCO 1841

|

-------INTERNET--------

|

Cisco 837(NAT)public IP address

|

Watchgaurd X15 (VPN/NAT)

WAN PORT: 192.168.0.254

INTERNAL: 10.250.2.254

|

INTERNAL SWITCH(Office LAN 10.250.2.0/24)

A SITE TO SITE VPN tunnel needs to be establish between CISCO ASA in HEADOFFICE and WATCHGAURD in BRANCHOFFICE, Can anyone have a look to see if this will work without any problems, primarily the branch office will run CITRIX sessions over the VPN.

b.hsu · ‎11-21-2006

If you are doing internal authentication for example:

Configuration | User Management | Users | Modify

Define the ip address and subnet mask for this particular user under the identity tab.

Configuration | System | Address Management | Assignment

Check the option for: Use Address from Authentication Server.