cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
195
Views
0
Helpful
1
Replies
Highlighted
Beginner

browsing and tunnel from a same host

Hi guys

I want to know how I can configure a host involved to a vpn L2L (nat0) to also browse on the internet (nat1). I have an asa with IOS version 7.2.

your help will be appreciate.

regards

Everyone's tags (5)
1 REPLY 1
Cisco Employee

browsing and tunnel from a same host

Hello,

You can do it in the following way:

VPN:

access-list nat0 permit ip 10.0.0.1 255.255.255.0 172.16.0.0 255.255.255.0

nat (inside) 0 access-list nat0

And then just pat your host (or network):

nat (inside) 1 10.0.0.0 255.255.255.0

global (outside) 1 interface

nat0 will be evaluated only for accessing remote end.