PAT Configuration over VPN

[Mokhalil82]

Hi

I have a 3rd party that needs to access our servers over a site to site VPN. Their inside subnet is already used on our side. So i have asked them to PAT their inside subnet to another IP address so their inside subnet is invisible to us, but they advised their firewall does not support it :-|

So I want to PAT their subnet as it hits our firewall, as traffic is only incoming over the VPN. Is this the correct configuration

MY_SERVER 192.168.50.1

THEIR_INTERNAL 192.168.1.0/24

PAT_ADDRESS 192.168.100.1

nat (inside, outside) source static MY_SERVER  MY_SERVER destination dynamic PAT_ADDRESS  THEIR_INTERNAL

Thanks

[Marius Gunnerud · Accepted solution]

That is correct configuration, just need to make sure that routing to 192.168.100.1 hits the VPN firewall.