Double nat for a host

[halids44]

hello everyone,

in my topology., my client has an ip adress 192.168.1.1. remote site server has 10.251.67.44. I succeed the access the server with a different source ip address 172.29.103.1 via ipsec tunnel. by the static nat I am changing the source private ip to another private ip address. because remote site doesn't accept any other source address for the server. But I want my host to access the internet with the same outgoing interface and with the outside public ip address. How can I achive that? Both routers are 1841 series.  thanks for your interest.

[paul driver · Accepted solution]

Hello
So you with need to nat that source ip on two occasions 
1) Default dynamic pat going towards your isp
2) Static nat towards destination host over the vpn

To accommodate the static nat vpn and dynamic nat for internet example:
access-list 101 permit ip host 192.168.x.x host 10.x.x.x
access-list 1 permit 192.168.x.x 0.0.0.255

Route-map ISP_rm
match ip address 1
match interface <isp1>

Route-map Vpn
match ip address 101
match interface <vpn>

ip nat pool ISP <public ip public ip> prefix-length 24 
ip nat inside source route-map ISP_rm pool ISP
ip nat inside source static 192.168.x.x 172.16.x.x.x route-map Vpn 

ip route 0.0.0.0 0.0.0.0 <x.x.x> ISP nexthop
ip route 10.x.x.x 255.255.255.255 <x.x.x> VPN nexthop

Sent from iphone