IPsec VPN between AS5505 and Netscreen 500

[eezergeezer]

Hi People,

Can anyone help..

I have a established VPN between NS500 and AS5505

The following diagram shows whats going on.

customer source subnet: 192.168.2.0/24

Source NAT to 10.160.64.33

NS500: sub int 1.3  :  10.160.64.1

Destination NAT to : 199.53.28.17 <-- this is a server IP which allows telnet on specific ports. The source has to be 10.160.64.33 to pass the firewall.

In the same way a new connection is required to another server IP behind a firewall.

target is going to be : 159.5.250.194/32

The source for this connection has to be 159.5.188.40 in order to pass the firewall and hit the above target.

Im not sure how to achieve this, please help...

Thanks in advance.

[praprama]

Hi Amar,

I guess what you are looking for is policy based NAT on the ASA.

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/nat_overview.html#wp1088419

Hope this helps!

Regards,

Prapanch