browsing and tunnel from a same host

[habibnoubissi]

Hi guys

I want to know how I can configure a host involved to a vpn L2L (nat0) to also browse on the internet (nat1). I have an asa with IOS version 7.2.

your help will be appreciate.

regards

[Eugene Korneychuk]

Hello,

You can do it in the following way:

VPN:

access-list nat0 permit ip 10.0.0.1 255.255.255.0 172.16.0.0 255.255.255.0

nat (inside) 0 access-list nat0

And then just pat your host (or network):

nat (inside) 1 10.0.0.0 255.255.255.0

global (outside) 1 interface

nat0 will be evaluated only for accessing remote end.