AVOID NAT

[gcocchi]

I need a help in configuring nat.

My net 172.29.4.0/24 should be patted with a global ip 82.x.x.x, but when i try to reach 192.168.0.0/24 over a ipsec VPN, i need to avoid nat totally.

I readed something about route-map.

Some help please.

Thx.

[tekha]

Well you probably have an access-list specifing what to NAT, e.g. "access-list 102 permit ip 172.29.4.0 0.0.0.255 any". If you don't use an extend ACL, then please do, but put a deny statement in on the top, like so:

access-list 102 deny ip 172.29.4.0 0.0.0.255 192.168.0.0 0.0.0.255

access-list 102 permit ip 172.29.4.0 0.0.0.255 any