Cisco VPN 3000 - double NAT?

[yuriy_litvak]

Greetings,

I have inherited a Cisco VPN 3005 and need to configure an interesting scenario:

2 LAN-2-LAN tunnels: 1 required an outside IP and has an existing static NAT of 192.168.1.1 -> 12.2.1.1 for 0.0.0.0 as the destination

I now have a need to created a new NAT for 192.168.1.1 to translate to 10.99.1.1 for destination of 13.3.1.1, 14.3.1.1 and 15.3.1.1.

Is it possible to have the above scenario, or even NAT 12.2.1.1 from the first NAT back to 10.99.1.1??

Any help is appreciated and I hope the scenario is layed out correctly.

[Jennifer Halim]

Definitely not possible to NAT 12.2.1.1 from the first NAT back to 10.99.1.1.

Unfortunately i don't have a lab VPN3000 to test your scenario, however, I know for sure if you have specific destination, you can configure multiple NAT for the same source.

From your above example, if you can change your first/existing NAT to specific destination that does not overlap with your second NAT, then that would work.