cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2082
Views
0
Helpful
1
Comments
TCC_2
Level 10
Level 10

Resolution

To configure inbound NAT on the Cisco VPN 3000 Concentrator, perform these steps:

  1. Log in to the Concentrator through HTTP or HTTPS.

  2. Go to Configuration > Policy Management > Traffic Management > NAT > Enable.

  3. Select LAN-LAN NAT Rules. Click Apply.

  4. Go to Configuration > Policy Management > Traffic Management > NAT > LAN-LAN NAT Rules.

  5. Click Add.

  6. Select Static. Configure the source address, translated address and the destination address with correct relevant wildcard masks.

  7. Click Add.

Note: The source address is the remote address.The destination address is the local address behind the Concentrator. The translated address is the one into which the remote address should be translated.

For example, the remote network is 1.1.1.0 255.255.255.0. If the network behind the Concentrator is 2.2.2.0 255.255.255.0, and you want the remote network to be visible as 3.3.3.0 255.255.255.0, it would look like this:

Source : 1.1.1.0
Wildcard Mask : 0.0.0.255
Translated : 3.3.3.0
Wildcard Mask : 0.0.0.255
Destination : 2.2.2.0
Wildcard Mask : 0.0.0.255

For additional information, refer to the Configuration | Policy Management | Traffic Management | NAT section of Policy Management.

Comments
kaachary
Cisco Employee
Cisco Employee
Concentrator doesn't do inbound L2L NAT, hence the document is incorrect.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: