NAT question

jkrawczyk · ‎06-16-2006

Host 172.30.208.30

Router 172.30.208.1

Router 172.30.7.1

PIX inside 172.31.48.1

PIX outside 60.200.200.2

As noted above, I have a host with the IP addres of 172.30.208.30. I need this source address to change when this passes through my PIX to 172.31.48.30. This is the address that I want my business partner to see as my source address when this packet arrives at the other end of the VPN tunnel. (VPN and ACL is setup)

This should work.

static (inside, outside) 172.31.48.30 172.30.208.30 netmask 255.255.255.255 0 0

Being that I have the nat/global configured on my outside interface, I'm wondering if this VPN destined packet will again be translated with teh source IP of 60.200.200.100 (my overload IP)

Comments please.

Regards

Jeff

olorunloba · ‎06-16-2006

If your VPN setup requires NAT, then the packet will be translated again. Note that the PIX will never know, and has no way of knowing that the IP address has been previously translated. This double translation does not however hinder communication.